Data Policy

General information

Room Estate AG and its subsidiaries (hereinafter referred to as “Room Estate,” “roomestate.com,” “we” or “us”) look forward to your visit to one of our websites, apps or other media. To provide the features, products and services, we need to process information about you. The types of information we collect depend on how you use our products. We process your personal data in accordance with the Federal Act on Data Protection of September 25, 2020 (Data Protection Act, FADP) and the Ordinance on Data Protection of August 31, 2022 (DPO). Where the EU General Data Protection Regulation (GDPR) applies in an individual case, we also comply with it.

This Data Policy informs you about the nature, scope and purpose of the processing of personal data (hereinafter “data”) in the course of providing our services and within our online offering and the associated websites, functions and content, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as “online offering”). We use terms such as “personal data,” “processing,” “controller” or “processor” within the meaning of Art. 5 FADP.

Controller

Room Estate AG

Katzenbachstrasse 71
8052 Zürich
E-mail: support@roomestate.com
Phone: +41 62 873 22 11
VAT No.: CHE-101.593.856 MWST

For questions about data protection and to exercise your rights, you can reach us at support@roomestate.com or by mail at the address above, marked “Data Protection.”

Types of data processed

Basic data (e.g., personal master data, names, gender or addresses)
Contact data (e.g., e-mail, phone numbers)
Content data (e.g., text entries, photographs, videos)
Usage data (e.g., web pages visited, interest in content, access times)
Metadata/communication data (e.g., device information, IP addresses)
Contract data (e.g., lease, room, lease term, rent, termination)
Information from the rental application used to verify identity and ability to pay (e.g., official ID, employer, salary details)
Content of inquiries, tickets and defect reports, including uploaded photos and documents

Categories of data subjects

Visitors and users of the online offering, prospective tenants and current and former tenants (hereinafter we also refer to the data subjects collectively as “users”).

Purpose of processing

Provision of the online offering, its functions and content
Responding to contact requests and communicating with users
Conclusion and administration of leases, including review of the rental application
Processing of service requests, tickets and defect reports, including with the support of artificial intelligence
Security measures
Audience measurement/marketing

Relevant legal bases

We process personal data in accordance with the principles of the FADP, that is, lawfully, in good faith, proportionately and only for purposes that are recognizable to you (Art. 6 FADP).

Where the GDPR applies to a processing activity and the legal basis is not stated in this Data Policy, the following applies:
The legal basis for obtaining consent is Art. 6 para. 1 let. a and Art. 7 GDPR;
The legal basis for processing to perform our services and carry out contractual measures and to respond to inquiries is Art. 6 para. 1 let. b GDPR;
The legal basis for processing to comply with our legal obligations is Art. 6 para. 1 let. c GDPR;
In the event that vital interests of the data subject or of another natural person make the processing of personal data necessary, Art. 6 para. 1 let. d GDPR serves as the legal basis.
The legal basis for processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller is Art. 6 para. 1 let. e GDPR.
The legal basis for processing to safeguard our legitimate interests is Art. 6 para. 1 let. f GDPR.
The processing of data for purposes other than those for which it was collected is governed by the requirements of Art. 6 para. 4 GDPR.
The processing of special categories of data (within the meaning of Art. 9 para. 1 GDPR) is governed by the requirements of Art. 9 para. 2 GDPR.

Security measures

In accordance with the legal requirements, and taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.

These measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data as well as access to the data, its input, its transfer, the securing of its availability and its separation. We have also established procedures that ensure the exercise of data subject rights, the deletion of data and the response to threats to the data. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and procedures, in line with the principle of data protection by design and by default.

Cooperation with processors, joint controllers and third parties

Where, in the course of our processing, we disclose data to other persons and companies (processors, joint controllers or third parties), transfer it to them or otherwise grant them access to it, we do so only on the basis of a legal permission (e.g., if a transfer of the data to third parties, such as payment service providers, is necessary to perform a contract), if users have consented, if a legal obligation provides for this, on the basis of our legitimate interests (e.g., when using agents, web hosts, etc.), for a third party to arrange an appointment directly in the user’s interest (e.g., a viewing by a prospective tenant, the repair of defects by contractors, the performance of a service, etc.) or after the conclusion of a contract for, or the move into, the same community (e.g., apartment) by a roommate (e.g., for the purpose of getting to know each other, setting up the organization of communal goods in the shared apartment, etc.).

Where we disclose or transfer data to other companies within our group of companies or otherwise grant them access, we do so in particular for administrative purposes as a legitimate interest and, beyond that, on a basis that complies with the legal requirements.

We use processors in particular in these areas:

Hosting and cloud infrastructure (e.g., Amazon Web Services, Hostpoint)
Communication with prospective tenants and tenants (e.g., Front, Mailchimp and Mandrill, Twilio)
Credit card payments (Stripe)
Accounting and archiving (SAP Business ByDesign via all4cloud, Kendox)
Office and collaboration (Google Workspace, Microsoft 365, Slack)
Error and usage analysis of our apps (Sentry, PostHog)
Translation (DeepL)
Inspection reports and surveys (SurveySparrow)
Cookie consent (Cookiebot)
AI services (see “Use of artificial intelligence”)

Use of artificial intelligence

Our employees use AI services to process inquiries, tickets and defect reports more quickly, for example to draft a reply or a damage report. For this purpose, an AI service may retrieve data from our management system, such as name, contact data, contract data, ticket content and uploaded photos and documents. We do not pass on sensitive personal data or official identity documents to AI services.

For this, we use Claude from Anthropic Ireland, Limited, Dublin, Ireland, as a processor. Anthropic processes the data only on our behalf and stores it in the USA. The disclosure to the USA is based on standard contractual clauses with the adaptations for Switzerland (see “Disclosure abroad”).

For AI features in our platform, we also use AI models via Amazon Web Services (Amazon Web Services EMEA SARL, Luxembourg) in data centers in Switzerland and Germany.

Decisions that affect you, for example on deductions from the security deposit, are always made by a Room Estate employee. The AI only creates drafts. We do not make automated individual decisions within the meaning of Art. 21 FADP.

Disclosure abroad

We process personal data in Switzerland and in EU member states. Some processors also process data in the USA or worldwide, in particular Anthropic (AI), Front (customer communication), Mailchimp and Mandrill (e-mail delivery), Twilio (SMS and verification), Stripe (credit card payments) and SurveySparrow (inspection reports and surveys).

The Federal Council has found that the EU member states provide an adequate level of data protection (Annex 1 DPO). For the USA, this applies only to companies certified under the Swiss-U.S. Data Privacy Framework. In all other cases, we base the disclosure on standard data protection clauses recognized by the Federal Data Protection and Information Commissioner (FDPIC) (Art. 16 para. 2 let. d FADP).

Rights of data subjects

Under the FADP, you have the following rights in particular:

Information on whether and which personal data we process about you (Art. 25 FADP)
Delivery of the personal data you have disclosed to us in a commonly used electronic format, or its transmission to another controller (Art. 28 FADP)
Correction of inaccurate personal data (Art. 32 para. 1 FADP)
Deletion of your personal data or prohibition of a specific processing or disclosure (Art. 32 para. 2 FADP), unless a legal obligation or an ongoing contract, e.g., a lease, precludes this
Objection to processing (Art. 30 para. 2 let. b FADP)

An e-mail to support@roomestate.com is sufficient for your request. We may ask for proof of your identity. You can also contact the Federal Data Protection and Information Commissioner (FDPIC).

Right to withdraw consent

You have the right to withdraw any consent you have given, with effect for the future.

Right to object

You may object at any time to the future processing of data concerning you in accordance with the legal requirements. In particular, you may object to processing for direct marketing purposes.

Cookies and right to object to direct marketing

“Cookies” are small files that are stored on users’ computers. Various information can be stored in cookies. A cookie primarily serves to store information about a user (or the device on which the cookie is stored) during or after their visit to an online offering. Temporary cookies, or “session cookies” or “transient cookies,” are cookies that are deleted after a user leaves an online offering and closes their browser. Such a cookie may store, for example, the contents of a shopping cart in an online store or a login status. Cookies that remain stored even after the browser is closed are referred to as “permanent” or “persistent.” For example, the login status can be saved if users return after several days. Such a cookie may likewise store users’ interests, which are used for audience measurement or marketing purposes. “Third-party cookies” are cookies offered by providers other than the controller operating the online offering (otherwise, if they are only the controller’s own cookies, they are referred to as “first-party cookies”).

We may use temporary and permanent cookies and provide information about this in our Data Policy.

If users do not want cookies to be stored on their computer, they are asked to disable the corresponding option in their browser’s system settings. Stored cookies can be deleted in the browser’s system settings. Excluding cookies may limit the functionality of this online offering.

A general objection to the use of cookies employed for online marketing purposes can be declared for many services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be prevented by disabling them in the browser settings. Please note that you may then not be able to use all functions of this online offering.

On your first visit, our cookie banner (Cookiebot from Usercentrics A/S, Copenhagen, Denmark) asks you which categories you consent to (Preferences, Statistics, Marketing). We always set necessary cookies. You can change or withdraw your choice at any time.

For more information about cookies on our website, see our Cookie Compliance page.

Deletion of data

The data we process is deleted or its processing restricted in accordance with the legal requirements. Unless expressly stated otherwise in this Data Policy, the data stored by us is deleted as soon as it is no longer required for its intended purpose and no statutory retention obligations prevent its deletion.

If the data is not deleted because it is required for other, legally permissible purposes, its processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

Changes and updates to this Data Policy

We adapt this Data Policy when our data processing changes. We will inform you of material changes by e-mail or at your next login. The version currently published on our website applies.

Last updated: October 15, 2026

Business-related processing

In addition, we process

Contract data (e.g., subject matter of the contract, term, customer category).
Payment data (e.g., bank details, payment history)
Logistics-related data (e.g., condition, location and use of furnishings, performance of services in our properties, etc.) of our customers, prospective customers and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.

Order processing in the online store and customer account

We process our customers’ data in the context of the ordering processes in our online store to enable them to select and order the chosen products and services, and to pay for them and have them delivered or performed.

The data processed includes basic data, communication data, contract data, payment data, personality profile data and occupation-related data, and the persons affected by the processing include our customers, prospective customers and other business partners. The processing takes place for the purpose of providing contractual services in the context of operating an online store, billing, delivery and customer service. In doing so, we use session cookies to store the contents of the shopping cart and permanent cookies to store the login status.

The processing is carried out to perform our services and carry out contractual measures (e.g., processing orders, meeting potential new roommates in person, etc.) and to the extent required by law (e.g., legally required archiving of business transactions for commercial and tax purposes). The information marked as required is necessary to establish and perform the contract. We disclose the data to third parties only in the context of delivery, payment or within the scope of legal permissions and obligations, and also where this is based on our legitimate interests, about which we inform you in this Data Policy (e.g., to legal and tax advisors, financial institutions, shipping companies and authorities).

Users can optionally create a user account in which they can, in particular, view their orders. During registration, users are informed of the required mandatory information. User accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data relating to the user account is deleted unless its retention is necessary for commercial or tax law reasons. Information in the customer account remains until the account is deleted, followed by archiving where there is a legal obligation or a legitimate interest on our part (e.g., in the event of legal disputes). Once notice of termination has been given, it is the users’ responsibility to back up their data before the contract ends.

When users register, log in again and use our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests and those of the users in protection against misuse and other unauthorized use. As a rule, this data is not passed on to third parties unless this is necessary to pursue our legal claims as a legitimate interest or there is a legal obligation to do so.

Deletion takes place after the expiry of statutory warranty rights and other contractual rights or obligations (e.g., payment claims or performance obligations under contracts with customers), with the need to retain the data being reviewed every three years; where data is retained due to statutory archiving obligations, it is deleted once these obligations expire. In addition, user accounts can only be deleted once neither party has any active obligations left (e.g., a lease).

External payment service providers

We receive most payments by bank transfer. For credit card payments, we use an external payment service provider (Stripe Payments Europe, Limited, Dublin, Ireland, privacy policy: https://stripe.com/de-ch/privacy).

In the context of performing contracts, we use the payment service providers on the basis of Art. 6 para. 1 let. b GDPR. Otherwise, we use external payment service providers on the basis of our legitimate interests under Art. 6 para. 1 let. f GDPR in order to offer our users effective and secure payment options.

The data processed by the payment service providers includes basic data, such as name and address, bank details, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, amount and recipient-related information. This information is required to carry out the transactions. However, the data entered is processed only by the payment service providers and stored with them. This means that we do not receive any account or credit card information, only a confirmation or a negative notice regarding the payment. Under certain circumstances, the payment service providers transmit the data to credit reporting agencies. The purpose of this transmission is to verify identity and creditworthiness. In this regard, we refer to the general terms and conditions and privacy notices of the payment service providers.

The payment transactions are governed by the terms and conditions and privacy notices of the respective payment service providers, which can be accessed on the respective websites or transaction applications. We also refer to these for further information and for asserting rights of withdrawal, rights to information and other data subject rights.

Administration, financial accounting, office organization, contact management

We process data in the context of administrative tasks and the organization of our business, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the course of providing our contractual services. The legal bases for processing are Art. 6 para. 1 let. c GDPR and Art. 6 para. 1 let. f GDPR. Customers, prospective customers, business partners and website visitors are affected by the processing. The purpose of and our interest in the processing lie in administration, financial accounting, office organization and the archiving of data, that is, tasks that serve to maintain our business activities, perform our tasks and provide our services. The deletion of data relating to contractual services and contractual communication follows the information given for these processing activities.

In this context, we disclose or transfer data to the tax authorities, advisors such as tax advisors or auditors, other fee collection agencies, payment service providers and housing, registration and migration offices (to the extent required by law).

Furthermore, on the basis of our business interests, we store information about suppliers, event organizers and other business partners, e.g., for the purpose of contacting them later. As a rule, we store this mostly company-related data permanently.

Business analyses and market research

In order to operate our business economically and to identify market trends and the wishes of contractual partners and users, we analyze the data available to us on business transactions, contracts, inquiries, etc. In doing so, we process basic data, communication data, contract data, payment data, usage data and metadata on the basis of Art. 6 para. 1 let. f GDPR, with the data subjects including contractual partners, prospective customers, customers, visitors and users of our online offering.

The analyses are carried out for the purpose of business evaluations, marketing and market research. In doing so, we may take into account the profiles of registered users with information, e.g., on the services they have used. The analyses help us increase user-friendliness and optimize our offering and our business efficiency. The analyses are for our use only and are not disclosed externally unless they are anonymous analyses with aggregated values.

Where these analyses or profiles relate to individuals, they are deleted or anonymized upon termination by the users, otherwise two years after the conclusion of the contract. Apart from that, overall business analyses and general trend assessments are prepared anonymously wherever possible.

Registration function

Users can create a user account. During registration, users are informed of the required mandatory information, which is processed on the basis of Art. 6 para. 1 let. b GDPR for the purpose of providing the user account. The data processed includes, in particular, the login information (name, password and an e-mail address). The data entered during registration is used for the purposes of using the user account and the purpose it serves. We collect the content, communications and other information you provide when you use our products; this includes your registration for an account, the creation or sharing of content and the exchange of messages or communication with others.

Users may be informed by e-mail about information relevant to their user account, such as technical changes. If users have terminated their user account, their data relating to the user account is deleted, subject to any statutory retention obligation. Once notice of termination has been given, it is the users’ responsibility to back up their data before the contract ends. We are entitled to irretrievably delete all of the user’s data stored during the term of the contract.

When users use our registration and login functions and their user account, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests and those of the users in protection against misuse and other unauthorized use. As a rule, this data is not passed on to third parties unless this is necessary to pursue our claims or there is a legal obligation to do so under Art. 6 para. 1 let. c GDPR. The IP addresses are anonymized or deleted after 7 days at the latest.

Comments and posts

If users leave comments or other posts, their IP addresses may be stored for 7 days on the basis of our legitimate interests within the meaning of Art. 6 para. 1 let. f GDPR. This is done for our own protection in case someone leaves unlawful content in comments and posts (insults, prohibited political propaganda, etc.). In such a case, we ourselves may be held liable for the comment or post and therefore have an interest in the identity of the author.

Furthermore, we reserve the right to process users’ information for the purpose of spam detection on the basis of our legitimate interests under Art. 6 para. 1 let. f GDPR.

On the same legal basis, in the case of surveys, we reserve the right to store users’ IP addresses for the duration of the survey and to use cookies to prevent multiple votes.

The personal information provided in comments and posts, any contact and website information and the content itself are stored by us permanently until the users object.

Comment subscriptions

Users can subscribe to follow-up comments with their consent under Art. 6 para. 1 let. a GDPR. Users receive a confirmation e-mail to verify that they are the owner of the e-mail address entered. Users can unsubscribe from ongoing comment subscriptions at any time. The confirmation e-mail will contain information on the options for withdrawing consent. To be able to prove users’ consent, we store the time of subscription together with the users’ IP address and delete this information when users unsubscribe.

You can cancel receipt of our subscription at any time, that is, withdraw your consent. We may store unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before deleting them in order to be able to prove consent that was previously given. The processing of this data is limited to the purpose of possibly defending against claims. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed at the same time.

Contacting us

When users contact us (e.g., via contact form, e-mail, phone or social media), their information is processed to handle the contact request and its follow-up in accordance with Art. 6 para. 1 let. b (in the context of contractual/pre-contractual relationships) and Art. 6 para. 1 let. f (other inquiries) GDPR. Users’ information may be stored in a customer relationship management system (“CRM system”) or a comparable system for organizing inquiries.

We delete the inquiries once they are no longer required. We review whether they are still required every two years; the statutory archiving obligations also apply.

For e-mail, the contact form and live chat, we use Front from FrontApp, Inc., San Francisco, USA. The disclosure to the USA is based on the safeguards set out in the section “Disclosure abroad.”

Newsletter (Mailchimp and Mandrill)

Newsletters are sent via the mailing service provider “MailChimp” or “Mandrill,” a newsletter delivery platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the mailing service provider’s privacy policy at https://mailchimp.com/legal/privacy/. The disclosure to the USA is based on the safeguards set out in the section “Disclosure abroad.” The mailing service provider is used on the basis of our legitimate interests under Art. 6 para. 1 let. f GDPR and a data processing agreement under Art. 28 para. 3 sentence 1 GDPR.

The mailing service provider may use the recipients’ data in pseudonymous form, that is, without assignment to a user, to optimize or improve its own services, e.g., for the technical optimization of the delivery and presentation of the newsletters or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to contact them itself or to pass the data on to third parties.

Hosting and e-mail delivery

The hosting services we use serve to provide infrastructure and platform services, computing capacity, storage space and database services, e-mail delivery, security services and technical maintenance services, which we use for the purpose of operating this online offering.

In doing so, we or our hosting provider process basic data, contact data, content data, contract data, usage data, metadata and communication data, personality profile data and occupation-related data of customers, prospective customers and visitors to this online offering on the basis of our legitimate interests in the efficient and secure provision of this online offering under Art. 6 para. 1 let. f GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).

We operate our platform, website and databases with Amazon Web Services (Amazon Web Services EMEA SARL, Luxembourg) in data centers in Switzerland and the EU. Our domains are managed by Hostpoint AG, Rapperswil-Jona, Switzerland.

Facebook Pixel, Custom Audiences and Facebook Conversion

Within our online offering, on the basis of our legitimate interests in the analysis, optimization and economic operation of our online offering, and for these purposes, we use the “Facebook pixel” of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are resident in the EU, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).

On the one hand, the Facebook pixel enables Facebook to define the visitors to our online offering as a target group for displaying ads (known as “Facebook ads”). Accordingly, we use the Facebook pixel to display the Facebook ads we place only to those Facebook users who have shown an interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products, determined on the basis of the web pages visited) that we transmit to Facebook (known as “Custom Audiences”). With the Facebook pixel, we also want to ensure that our Facebook ads match users’ potential interests and are not perceived as intrusive. The Facebook pixel also allows us to track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (known as “conversion”).

Facebook processes the data in accordance with Facebook’s data use policy. Accordingly, general information on the display of Facebook ads can be found in Facebook’s data use policy at https://www.facebook.com/policy. You can find specific information and details about the Facebook pixel and how it works in the Facebook Help Center at https://www.facebook.com/business/help/651294705016616.

You can object to the collection of data by the Facebook pixel and the use of your data to display Facebook ads. To choose which types of ads are shown to you on Facebook, you can visit the page set up by Facebook at https://www.facebook.com/settings?tab=ads and follow the instructions there on the settings for usage-based advertising. The settings are platform-independent, that is, they apply to all devices, such as desktop computers or mobile devices.

You can also object to the use of cookies for audience measurement and advertising purposes via the opt-out page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and, in addition, the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

Online presences in social media

We maintain online presences within social networks and platforms in order to communicate with the customers, prospective customers and users active there and to inform them about our services there.

We would like to point out that users’ data may be processed outside the European Union. This may result in risks for users, for example because it could make it more difficult to enforce users’ rights.

Furthermore, users’ data is usually processed for market research and advertising purposes. For example, usage profiles can be created from users’ usage behavior and the resulting interests. These usage profiles can in turn be used, for example, to place ads within and outside the platforms that presumably match users’ interests. For these purposes, cookies are usually stored on users’ computers, in which users’ usage behavior and interests are stored. Furthermore, data can also be stored in the usage profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).

Users’ personal data is processed on the basis of our legitimate interests in informing and communicating with users effectively under Art. 6 para. 1 let. f GDPR. If users are asked by the respective platform providers to consent to the data processing described above, the legal basis for the processing is Art. 6 para. 1 let. a, Art. 7 GDPR.

For a detailed description of the respective processing and the options to object (opt-out), we refer to the providers’ information linked below.

In the case of requests for information and the assertion of user rights, we also point out that these can be asserted most effectively with the providers. Only the providers have access to the users’ data and can take appropriate measures and provide information directly. If you still need help, you can contact us.

- Facebook, Facebook Pages, Facebook Groups (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on the basis of an agreement on the joint processing of personal data, privacy policy: https://www.facebook.com/about/privacy/, specifically for Pages: https://www.facebook.com/legal/terms/information_about_page_insights_data, opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com.

- Google/YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), privacy policy: https://policies.google.com/privacy, opt-out: https://adssettings.google.com/authenticated.

- Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA), privacy policy/opt-out: http://instagram.com/about/legal/privacy/.

- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland), privacy policy: https://www.linkedin.com/legal/privacy-policy, opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Integration of third-party services and content

Within our online offering, on the basis of our legitimate interests (i.e., interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 para. 1 let. f GDPR), we use content or service offerings from third-party providers in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”).

This always requires that the third-party providers of this content receive the users’ IP address, since without the IP address they could not send the content to the users’ browsers. The IP address is therefore required to display this content. We strive to use only content whose respective providers use the IP address solely to deliver the content. Third-party providers may also use what are known as pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to analyze information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on users’ devices and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offering, and may also be linked with such information from other sources.

Youtube

We integrate videos from the “YouTube” platform of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.

Google ReCaptcha

We integrate the bot detection function, e.g., for entries in online forms (“ReCaptcha”), of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.

Google Maps

We integrate maps from the “Google Maps” service of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The data processed may include, in particular, users’ IP addresses and location data, which, however, are not collected without their consent (usually given in the settings of their mobile devices). The data may be processed in the USA. Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.

On our website, we use the “LinkedIn Insight Tag” of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. It measures how visitors use our website and shows us the effectiveness of our advertising on LinkedIn. For this purpose, LinkedIn sets cookies (e.g., “bcookie” and “lidc”). Privacy policy: https://www.linkedin.com/legal/privacy-policy, opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

What's next?

Contact information