Logo DEHOGA Campus Baden-Württemberg

Privacy Policy

We are pleased to welcome you to our website. Below, we would like to inform you about the personal data we collect, the purposes for which we process your personal data, and the rights you have.

Definition of Terms

According to Art. 4 No. 1 GDPR, personal data refers to all information relating to an identified or identifiable natural person; an identifiable person is one who can be directly or indirectly identified, particularly by reference to an identifier such as name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.

According to Art. 4 No. 2 GDPR, the term “processing” refers to any operation or series of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, modification or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

Controller

DEHOGA Baden-Württemberg Servicegesellschaft mbH
Augustenstraße 6
70178 Stuttgart
Authorized representative: Jürgen Kirchherr (Managing Director)
Email: [email protected]
Phone: +49 711 / 61988-0

Data Protection Officer

For questions regarding data protection, please contact our external Data Protection Officer:

Data Protection Officer DEHOGA Baden-Württemberg Servicegesellschaft mbH
c/o Schützle Rechtsanwaltsgesellschaft mbH
Gutbrodweg 6/3
74074 Heilbronn

Phone: +49 7131 12 08 73 00
Fax: +49 7131 12 08 73 99
Mail: [email protected]

Types of Processed Data

  • Master data (name, address, etc.)
  • Contact data (email, phone number, etc.)
  • Meta / communication / usage data (IP address, operating system, etc.)

Rights of the Data Subject

Right to Access (Art. 15 GDPR)

You have the right to request confirmation as to whether we process personal data about you. If we do, you have the right to access the data and the information mentioned in Art. 15 (1) GDPR.

Right to Rectification (Art. 16 GDPR)

If we process incorrect personal data about you, you have the right to request the rectification of this incorrect data. You also have the right to request the completion of incomplete personal data.

Right to Erasure (Art. 17 GDPR)

You have the right to request the immediate deletion of your personal data if one of the reasons listed in Art. 17 (1) GDPR applies. This does not apply if one of the reasons listed in Art. 17 )3) GDPR is present.

Right to Restriction of Processing (Art. 18 GDPR)

If one of the conditions listed in Art. 18 (1) GDPR applies, you have the right to request the restriction of processing of your data.

Right to Object to Processing (Art. 21 GDPR)

If we process personal data based on Art. 6 (1) e) or f) GDPR, you have the right to object to this processing for reasons related to your particular situation.

Right to Data Portability (Art. 20 GDPR)

You have the right, if the conditions under Art. 20 (1) GDPR are met, to receive the personal data you provided to us in a structured, commonly used, and machine-readable format, and the right to transmit that data to another controller without hindrance.

Right to Withdraw Consent (Art. 7 (3) GDPR)

You have the right to withdraw your consent at any time. The lawfulness of processing based on consent before the withdrawal is not affected.

Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

You have the right to lodge a complaint with supervisory authority concerning the processing of your personal data. The relevant supervisory authority for DEHOGA Baden-Württemberg is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Lautenschlagerstr. 20
70173 Stuttgart
Phone: +49 711 / 615541-0
Fax: +49 711 / 61554115
Email: [email protected]

You can lodge your complaint with any supervisory authority, particularly the authority of your residence or workplace or the location of the alleged infringement.

Existence of Automated Decision-Making, Including Profiling (Art. 13 (2) f), Art. 22 (1, 4) GDPR)

We do not use automated decision-making, including profiling (Art. 13 (2) f), Art. 22 (1, 4) GDPR)

Recipients or Categories of Recipients of Personal Data

Your personal data will be passed on to third parties only if this is necessary for the performance of the contract or for the billing purposes or if you have given consent. The legal basis for such cases is Art. 6 (1) a) or b) GDPR. Specific recipients are mentioned under “Processing Operations” below.

Visit to Our Website

When you visit out website without registering or transmitting any data to us (e.g., through a contact form), personal data is processed that is transmitted during the connection between your device and our servers.

This includes data necessary to provide the website with a secure and stable display. This data includes the following information, which results from a log file entry:

  • IP address
  • Date and time of access
  • Time zone difference from GMT
  • The specific page accessed
  • Access status / HTTP
  • Amount of data transferred
  • Referring website (Referrer URL)
  • Browser used (including language and version)
  • Operating system used

These are referred to as meta / communication data.

The legal basis for the collection of these data is Art. 6 (1) f) GDPR. We have a legitimate interest in ensuring a reliable connection and comfortable use of our website, as well as in analyzing system stability and security, and using the data for other administrative purposes.

Data Storage / Deletion

We will inform you about the respective storage period or deletion or blocking time for data in accordance with the processing activities described in our privacy policy. If no explicit storage period is defined, the data will be deleted or blocked as soon as the purpose or legal basis of the processing no longer applies.

Data may be stored beyond the defined periods if legal provisions require it (e.g., § 147 AO, § 247 HGB). After the storage period, the personal data will be deleted or blocked unless further storage is required due to a legal basis. Furthermore, storage beyond the specified time may occur in the event of a (potential) dispute or other legal proceedings.

Cookies

To make the visit to our website attractive and to enable the use of certain features, we use cookies on various pages. These are small text files stored on your device. Some of the cookies we use are deleted after the browser session ends (session cookies), while others remain on your device and allow us to recognize your browser during your next visit (persistent cookies).

You can configure your browser to notify you about cookies being set and to decide individually whether to accept them, or to reject cookies for specific cases or in general. If cookies are not accepted, the functionality of our website may be limited.

The purpose of processing is to optimize the use and functionality of our website and provide necessary services. The legal basis for technically non-essential cookies is your consent in accordance with Art. 6 (1) a) GDPR, which we obtain through our "Cookiebot" banner (see below). More information can be found in our consent tool, which we use to obtain your consent.

Processing Operations

In the following operations, personal data is processed:

Hosting

We host our website with Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen (www.hetzner.com). When you visit our website, the data mentioned above ("Visit to Our Website") is transmitted to the servers of our hosting provider.

Cookiebot

We use the "Cookiebot" tool for consent management on our website. Cookiebot is a tool provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich. Cookiebot is used to manage the cookies set on our website. Cookiebot itself sets a necessary cookie. The legal basis for this is Art. 6 (1) f) GDPR, as our legitimate interest lies in managing cookies and obtaining the corresponding consent.

OpenStreetMap

We use the OpenStreetMap Foundation's map service on our website, which is based in the UK. The legal basis for this processing is Art. 6 (1) f) GDPR. Our legitimate interest lies in improving the user experience and enhancing the website's presentation.

etracker

We use etracker GmbH's application to analyze website visits. Etracker does not use cookies, instead utilizing cookieless session tracking. The legal basis for this processing is Art. 6 (1) f) GDPR, with our legitimate interest being to measure reach. The data collected is not stored for more than six months.