Privacy Policy

Thank you for your interest in GOLDBECK Parking Services GmbH at the URL https://www. goldbeck-parking.de (hereinafter referred to as "website"). The following information provides a simple overview of how personal data is processed when you visit our website. These data protection provisions address women and men equally. For better readability only the masculine language form (e.g. visitor, user, applicant, etc.) is used.
The following data protection information is divided into the following sections:

1.    Details of the person responsible
2.    Data processing on our website
3.    Rights of data subjects
 

1.     Details of the person responsible
Responsible in the sense of the data protection law is 
GOLDBECK Parking Services GmbH (hereinafter referred to as "GOLDBECK" or "we") 
Ummelner Strasse 4-6, 
33649 Bielefeld
Phone +49 0521 94 88 - 3711
Fax +49 0521 9488 - 3719
Mail: info@goldbeck-parking.de

Contact the data protection officer 
You can reach our external data protection officer at
GFAD data protection GmbH
Data protection officer
Huttenstrasse 34/35
10553 Berlin
or by e-mail to datenschutz@gfad.de 

2.     Data processing on our website 

2.1 Data security
 
To protect the transmission of your data, this website is encrypted with a valid SSL certificate according to the state of the art, at least TLS 1.2. You can recognize an encrypted connection by the character string https:// and the lock symbol in the browser line.
GOLDBECK also takes appropriate technical and organisational measures in accordance with Art. 32 DSGVO, taking into account the state of the art, implementation costs and the nature, scope, circumstances and purposes of the processing as well as the probability of occurrence and severity of the risk to the rights and freedoms of natural persons. In addition, confidentiality, integrity, availability and resilience of the systems and services related to the processing as well as a rapid restoration of the availability of personal data in the event of a physical or technical incident are ensured. 

Please be aware that while we strive to provide a secure and reliable website for our customers and users, we cannot guarantee the absolute confidentiality of any communication or material transmitted to or from our website.

2.2 Protection of minors
Our offer is basically aimed at adults. Persons under 16 years of age may not transmit personal data to us without the consent of their parents or legal guardians.


2.3 Hosting
The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services as well as technical maintenance services that we use for the purpose of operating this online offer.
In doing so, we or our hosting service provider on our behalf process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer in accordance with Art. 6 para. 1 lit. f DSGVO. The data processing of our hosting service provider is carried out within the framework of a contract processing agreement in accordance with Art. 28 DSGVO.

2.4 Access to the website
You can visit our website without providing any personal information. We temporarily store your access data, which is summarized in a log file on our web servers. The access data includes the following information:
•    Name and URL of the retrieved file
•    Date and time of access
•    Amount of data transmitted
•    Source/reference from which you reach the website
•    Browser and operating system used / in use
•    Used IP address
The aforementioned data is required to enable your terminal device to call up our website and use its functions. Unfortunately, it is not technically possible to call up our website without providing your IP address. Data processing is carried out on the basis of our legitimate interest in accordance with Art. 6 Para. 1 letter f DSGVO in order to ensure the functionality of the website and to display the contents of the website to you. In addition, this data serves us to optimise the website and to ensure the security of our information technology systems in the context of attack detection. Log files are deleted 7 days after collection.  Storage beyond this period is possible if there are indications of an illegal attack on our systems.


2.5    Use of cookies to ensure user-friendliness

We use cookies and external services on our website to make your visit attractive and to enable the use of certain functions. If the cookies are used for the purpose of concluding or implementing a contract, the legal basis is Art. 6 para. 1 lit. b DSGVO. If the cookies are used to ensure our legitimate interests in user-friendly functionality as well as analysis and improvement of our website, the legal basis is Art. 6 para. 1 lit. f DSGVO. Cookies are small text files that are sent to your browser from our web server and stored on your terminal device. 
Some cookies are technically necessary to optimize the use of our website and to make the display user-friendly. These include session cookies, ID cookies and also the opt-in cookie, in which your settings for the individual services are stored. Session cookies are deleted when you log out or close the browser session. The opt-in cookie is deleted after one year at the latest or when the cookies in the browser menu are deleted. By changing the privacy settings, the expiration time of the opt-in cookie is extended accordingly.


Permanent Cookie "Remain logged in
If you activate the "stay logged in" function within your account, the following permanent
Cookies are set to recognize you each time you visit the website: 
•    Ipcp.customer.rememberme 
This cookie is set exclusively on the terminal device you use. If you use other mobile devices, you must have the cookie set separately.
You can have this cookie deleted at any time via the cookie list of your browser. You are also welcome to inform us that we will make the appropriate changes. 
Cookies are set to make it easier for you to use the website and to eliminate the need to enter your login data. It takes place on the basis of your consent in accordance with Art. 6 Para. 1 letter a DSGVO, which you can revoke at any time with effect for the future by deleting the cookies using the appropriate settings in the browser menu. The legality of the use of this function until receipt of your revocation remains unaffected.

2.6    External services 

2.6.1    Google Tag Manager

We use the Google Tag Manager to manage our external services. The Google Tag Manager does not collect any personal information itself. The Tag Manager makes it easier for us to integrate and manage our tags. Tags are small pieces of code that are used to measure traffic and visitor behavior, measure the impact of online advertising and social channels, set up remarketing and targeting, and test and optimize websites, among other things. If you have disabled it, the Google Tag Manager will take it into account. For more information about Google Tag Manager, please visit: https://www.google.com/intl/de/tagmanager/use-policy.html.
For the transmission of data to Google LLC. Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA", there is an adequate EU data protection level due to the certification according to the Privacy Shield. For Google services within the EEA and Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, has been the responsible "Data Controller.


2.6.2    Analysis and performance 

2.6.2.1    Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC, USA ("Google"). Google Analytics also uses cookies which are stored on your computer and which enable an analysis of your use of our website. The information generated by the cookie about your use of our website is transferred to a Google server in the USA and stored there. The purpose of the Google Analytics component is to analyse the flow of visitors to our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile online reports for us which show the activities on our website, and to provide further services in connection with the use of our website. This data is stored for 14 months before it is automatically deleted. This service is only activated by your corresponding data protection settings and is therefore based on the legal basis of your given consent in accordance with Art. 6 para. 1 lit. a DSGVO. Google operates under the EU-US Privacy Shield and is certified accordingly. This guarantees an appropriate EU data protection level for data transfer to the USA.

For the Google services within the EEA and Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland has been the data controller since 22.01.2019.

In order to guarantee an anonymised recording of IP addresses, the source code of Google Analytics was extended by the code "_anonymizeIp", so that IP addresses are only processed in a shortened form in order to exclude the possibility of personal references. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other data from Google. You can also prevent the storage of these cookies by adjusting your browser settings accordingly. You can also prevent the collection of data generated by the cookie and related to your use of our website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:
http://tools.google.com/dlpage/gaoptout?hl=de.

Clicking this link sets an opt-out cookie that prevents your information from being collected by Google. If you delete your cookies in the browser menu, the opt-out cookie will also be deleted and may need to be reactivated by you.
Further information on terms of use and data protection can be found under the following links:
http://www.google.com/analytics/terms/de.html
http://www.google.com/intl/de/analytics/learn/privacy.html
http://www.google.de/intl/de/policies/privacy

2.6.2.2 Facebook custom audiences

Within our online offer, the so-called "Facebook pixel" of the social network Facebook, which is operated
 by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are resident in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), is used
 due to our legitimate interests in analysis, optimization and economic operation of our online offer and for these purposes. 
This service is only activated when you actively click on 
Facebook custom audiences
 through the corresponding data protection settings and thus give your consent in accordance with Art. 6 Para. 1 lit. a DSGVO. This consent can be revoked at any time through corresponding data protection settings.
Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active). 
On the one hand, the Facebook pixel enables Facebook to determine the visitors of our online offer as a target group for the presentation of ads (so-called "Facebook ads"). Accordingly, we use the Facebook Pixel to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "custom audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of users and do not appear to be annoying. With the help of the Facebook Pixel, we can also track the effectiveness of Facebook Ads for statistical and market research purposes by seeing whether users are redirected to our website after clicking on a Facebook Ad (so-called "conversion"). 
Specific information and details about the Facebook pixel and how it works can be found in the Facebook help section: https:
//www.facebook.com/business/help/651294705016616.Sie may object to the collection by the Facebook pixel and use of your data to display Facebook ads. To control what types of ads are displayed to you within Facebook, you can adjust settings in your Facebook account under Settings. To do this, log
 in to your Facebook account at https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices. 
You can also object to
 the use of cookies for reach measurement and advertising purposes via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and additionally the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
For more information about Facebook's data collection, please visit:
http://www.facebook.com/policy.php; 
http://www.facebook.com/help/186325668085084, 


2.6.3      External media 

2.6.3.1    Google Maps

To make it easier for you to find our organization's locations and parking facilities, as well as to help you find us if you need to drive to us, we use maps from Google Maps, a service provided by Google LLC, through an API to visually display geographic information in interactive maps. This service will only be activated when you actively click on Google maps through the corresponding data protection settings and thus give your consent in accordance with Art. 6 para. 1 lit. a DSGVO. This consent can be revoked at any time by means of appropriate data protection settings.
To be able to display the content in your browser, Google must receive your IP address, otherwise Google could not show you this embedded content. Google receives this information via an interface (API) and via cookies set by Google. In addition, to the best of our knowledge, the use of Google maps also transfers the following additional data to Google LLC:
•    the date and time of the visit to the website in question,
•    Internet address or URL of the web page accessed,
•    IP address 
For the transmission of data to Google LLC. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA" an adequate EU data protection level exists due to the certification according to the US-Privacy Shield https://www.privacyshield.gov/list. For Google services within the EEA and Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, has been the responsible "Data Controller" since 22.01.2019. 
By activating Google maps when you visit the website, Google receives the information that you have called up the corresponding subpage of our website. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you don't want your data to be associated with your Google profile, you must log out of your Google Account before activating Google maps. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the purpose of providing advertising that is tailored to your needs. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you cannot use the map display. For the purpose and scope of data collection and the further processing and use of data by Google, as well as your rights and settings options for protecting your privacy, please refer to Google's privacy policy at https://policies.google.com/privacy?hl=de. We would like to point out that as the provider of the website we have no influence on the data collection and use by Google. 

2.6.3.2 YouTube

We have integrated YouTube videos into our online offering, which are stored at https://www.YouTube.com and can be played directly from our website. You tube is a service of YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA ("YouTube"), a company of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). The You tube video service will not be activated until consent is given in accordance with Art. 6, para. 1, letter a, DSGVO by activating the service in the privacy settings or by clicking on the You tube itself. Consent that has been granted can be revoked with effect for the future by means of appropriate data protection settings. For further data processing by you tube after consent has been granted, we have no influence. 

By activating the You tube service when you visit the website, YouTube receives the information that you have called up the corresponding subpage of our website. This happens regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your information will be associated directly with your account. If you don't want the assignment to your profile on YouTube, you have to log out before activating the button. YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the purpose of providing needs-based advertising and to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

For more information on the purpose and scope of data collection and processing by YouTube, please see the Privacy Policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and is certified according to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework. This certification is a guarantee that Google's data transfers to the USA comply with an appropriate EU data protection level. For Google's services within the EEA and Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, has been the responsible "Data Controller" since January 22, 2019. 

2.6.3.3 Vimeo video platform

Embedded on our website are videos from Vimeo, which is operated by Vimeo LLC, 555 West 18th Street, New York 10011 ("Vimeo"). Certification in accordance with vimeo's US privacy shield guarantees that data transferred to the USA is subject to an appropriate level of EU data protection https://www.privacyshield.gov/participant_search .
When you visit our website and activate the Vimeo service in the content banner under cookie settings, your browser establishes a direct connection to the Vimeo servers. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. This integration informs Vimeo that your browser has called up the corresponding page on our website, even if you do not have a Vimeo profile or are not currently logged in to Vimeo. Thus, the use of the Vimeo video service on our website is based on the consent of the user in accordance with article 6, paragraph 1, letter a of the DSGVO in conjunction with article 7 of the DSGVO.
This information (including your IP address) is transmitted by your browser directly to a Vimeo server in the USA and stored there. If you are logged in to Vimeo, Vimeo can immediately assign your visit to our website to your Vimeo account. When you interact with the plug-ins, for example by clicking the "Vimeo" button, this information is also transmitted directly to a server of Instagram and stored there.
The information is also published to your Vimeo account and displayed to your contacts.
If you do not want Vimeo to associate the data collected through our website directly with your Vimeo account, you must log out of Vimeo before visiting our website.
For more information, please refer to the Vimeo privacy policy (https://vimeo.com/privacy).


2.6.3.4     AWSALB/ AWSALBCORS

Hi.Res.Cam GmbH, Bahnhofstraße 25, 69469 Weinheim, Germany uses Amazon Application Load Balancers (AWSALB) to properly route your traffic to their servers. This registers which server cluster serves the visitor. This is used in connection with load balancing to optimize the user experience. The AWSALB cookie maintains a "persistent session". This means that the AWSALB cookie continues to direct your requests to a persistent destination. This cookie is necessary for the site to function properly. For more information, please visit https://www.hi-res-cam.com/de/datenschutz/.
This service will only be activated when you actively click on Google maps through corresponding data protection settings and thus give your consent in accordance with Art. 6 Para. 1 lit. a DSGVO. This consent can be revoked at any time by making the appropriate data protection settings.

2.7     Social Media buttons

Use of social media plug-ins 
We currently use the following social media plug-ins: You tube, Facebook, Twitter, Xing, LinkedIn, Instagram, Kununu. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the initial letter or logo on the box. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked box and thereby activate it, the plug-in provider will receive the information that you have accessed the corresponding website of our online offer. In the case of Facebook and Xing, according to the respective providers in Germany, the IP address is anonymized immediately after it is collected. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and stored there (with US providers in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the greyed-out box. 
We have no influence on the collected data and data processing procedures, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also have no information about the deletion of the collected data by the plug-in provider. 
The plug-in provider stores the data collected about you as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the purpose of presenting need-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins we offer you the possibility to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. f DS-GVO. 
The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data we collect from you will be directly assigned to your existing account with the plug-in provider. If you click on the activated button and link to  B., the plug-in provider will also store this information in your user account and publicly share it with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as you can then avoid being assigned to your profile with the plug-in provider. 
Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the data protection declarations of these providers, which are provided below. There you will also find further information on your rights and settings options to protect your privacy. 
Addresses of the respective plug-in providers and URL with their data protection information: 
Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; 
Further information on data collection: http://www.facebook.com/policy.php; http://www.facebook.com/help/186325668085084
Facebook has submitted to the EU-US privacy shield, https://www.privacyshield.gov/EU-US-Framework 
Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Google hat sich dem EU-US-Privacy-Shield unterworfen, https://www.privacyshield.gov/EU-US-Framework. 
Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US privacy shield, https://www.privacyshield.gov/EU-US-Framework 
Xing, New Work SE, Dammtorstrasse 30, 20354 Hamburg, Germany https://privacy.xing.com/de/datenschutzerklaerung  
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn hat sich dem EU-US-Privacy-Shield unterworfen, https://www.privacyshield.gov/EU-US-Framework. 

2.8     Customer account

2.8.1 Establishment and termination
You have the possibility to create a customer account for our services. Here you can:
•    Concluding and terminating long-term parking contracts
•    Make reservations for parking spaces
•    Order and view GOLDBECK Parking Cards
•    view bills
When creating a customer account, you will be asked to provide your first name, last name, email address, postal address and a password. E-mail address and password serve as access data which we compare with your entries which you provide when accessing your customer account. We use your name and first name to find out who our contractual partner is. We use your address for billing purposes. This serves the implementation of pre-contractual measures and the fulfilment of the contract in accordance with Art. 6 para. 1 lit. b DSGVO.
At the end of the registration process we will send you an e-mail with a link. Your registration is only completed when you click on the link. If you do not click on the link for more than 14 days, your registration data will be deleted. The creation of a customer account is voluntary. Without a customer account, however, you cannot make reservations of parking spaces or order other paid services.

After you have created a customer account, you can view and edit your personal data in this account. You can cancel your customer account online at any time after the contract has been fulfilled. We reserve the right to terminate your customer account after 5 years of continuous inactivity with a notice period of one month to the end of the month.

2.8.2    Data of your customer account
The following areas are available to you in your customer account: 
•    Master data
•    Identification media
•    Orders
•    Reservations
•    Permanent parking contracts
•    GOLDBECK Parking Cards
All of the above information will remain in your account until you or we terminate it.

2.8.3    GOLDBECK Parking Cards
The card data of the selected entry identification are made anonymous. The card contains a card number which is assigned by GOLDBECK. It transmits the user's entry and exit times under the card number. This card number is stored at GOLDBECK with the name of the user, so that only here can the entry and exit times in the respective car park be assigned to the user by name.

2.8.4    Payment methods
Payment for services ordered online from GOLDBECK is mainly made by direct debit. A separate direct debit mandate is issued for this purpose. In some cases, the option of credit card payment is also offered. For this, we integrate the following service provider as order processor for processing: Wirecard AG, Einsteinring 35, 85609 Aschheim
More information about Wirecard is available at: https://www.wirecard.de/

2.9    Public App wannda

Wannda is a public transport app for Vienna that takes you quickly, easily and reliably from A to B, based on live data and always up to date. Wannda always delivers the right route. 
The external services Google maps and Google Analytics for firebase are also used to provide this service. By downloading this app a free contract for the use of the app is concluded with Goldbeck Parking GmbH Campus 21 | Liebermannstraße F04 302, A - 2345 Brunn am Gebirge. The legal basis for the data processing associated with this is thus the fulfilment of the contract in accordance with Art. 6 Para. 1 lit. b DSGVO.
This passenger information app is
 implemented by Fluidtime Data Services GmbHNeubaugasse
 12-14/25, A-1070 Vienna in the context of an order processing according to Art. 28 DSGVO. The app is offered by Goldbeck Parking GmbH, Campus 21 | Liebermannstraße F04 302, A - 2345 Brunn am Gebirge, Fon +43 (1) 890 09 18-50, Mail: info@goldbeck-parking.at

Collection of own location data
Our app only collects your location with your consent in order to use your current position as your start/destination or to determine stops in the vicinity. Your current location is only used on your device to identify stops in your vicinity and to request the current departures for these stops. If access to the location has been enabled, a transmission will be made to our server so that all stations in the vicinity of the location can be displayed. 
For the use as start/destination of a journey a geographical position is transmitted to the necessary servers. When the data is transferred to the server, it is therefore no longer known that this is your current location. The collection and transmission will only take place if you grant our app the appropriate permissions. The data is only used and stored volatilely in order to determine the requested information and to enable an appropriate error analysis (see section "Time of deletion"). You can disable access to the location data in the device settings.


Transmission of the IP address
When using the online services of our app (query of current departures, query of departures of a trip, connection search) the IP address is transmitted to the server for answering these queries. This is only used to transmit the requested information and to enable an appropriate error analysis (see section "Time of deletion").
App analysis
In order to evaluate and improve our service, the start/finish entries of the route enquiry will be stored on the basis of our legitimate interests in accordance with Art. 6 Para. 1 letter f DSGVO. The saved query times are stored on an hourly basis. No additional data that could directly identify a person (such as IP address or other ID) is stored for these route enquiries.
Also, the exact positions / stations of departure monitor queries, i.e. stations that a user clicks on in the app to display the departure monitor, are stored on an hourly basis for analysis and optimization of our service. 

Map material Google Maps
In our App we use the map material of Google maps, a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is an interactive (land) mapping service that visually displays geographic information. By using this service, you will be able to see the location of each stop. The use of this service is necessary for the functionality of this app and is based on our legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO as well as for the fulfilment of the existing usage agreement pursuant to Art. 6 para. 1 lit. b DSGVO.
Already when you access those pages in our app, in which the map of Google Maps is integrated, information about your use of our app (such as your IP address) is transmitted to servers of Google and stored there, this may also result in a transmission to the servers of Google LLC. in the USA. This happens regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not wish to be assigned to your profile on Google, you must log out before activating the button. In the event that personal data is transferred to Google LLC. based in the USA, Google LLC. has certified itself for the us European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list
You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html. The additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html.
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy/
By downloading and using our app you agree to the use of Google maps within the app wannda. By deactivating the App, you can revoke your consent at any time with effect for the future.

Analysis with Google Analytics for firebase
To improve our app offering, we use Google Analytics (including Google Analytics for Firebase), an analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, "Google"). Google Analytics uses so-called "cookies", text files which are stored on your smartphone and which enable an analysis of your use of the app. The information generated by Google Analytics about your use of the App is usually transferred to a Google server in the USA and stored there for up to 14 months. Within our app, IP anonymisation has been activated so that the IP address of Google users within member states of the European Union or in other states that are party to the Agreement on the European Economic Area is shortened and thus made anonymous. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. 
Google is committed to complying with the EU-U.S. Privacy Shield Agreement published by the U.S. Department of Commerce regarding the processing of personal data from EU member states. For more information, please visit https://policies.google.com/privacy/frameworks?hl=de&gl=de. For more information about Google's privacy policy, please visit https://policies.google.com/privacy?gl=de. More information specifically about data collection by Google Analytics for Firebase can be found here: https://support.google.com/firebase/answer/6318039?hl=de. 
On our behalf, Google will process the information collected to evaluate your use of the app, to compile reports on the activities and to provide us with further services associated with the use of the app. The IP address transmitted from your smartphone within the scope of Google Analytics is not combined with other data from Google. 
The legal basis for the processing of your data in connection with Google Analytics is Art. 6 para. 1 letter f) DSGVO (balancing of interests, based on our legitimate interest to statistically record the use of our App and to be able to improve on this basis) as well as your granted consent by downloading the App to your end device according to Art. 6 para. 1 letter a DSGVO.
By downloading and using our App you agree to the use of Google Analytics and Google maps within the App wannda. By deactivating the App, you can revoke your consent at any time with effect for the future.

Date of cancellation
All requests received on the servers are temporarily stored for a few days (approx. 7 days) in a log file for the purpose of a possible error analysis. After that they are automatically deleted.

Contact by e-mail
Personal data is collected when contacting us by e-mail. These data are stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f DSGVO. If your contact is aimed at the conclusion or fulfilment of a contract, an additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted after final processing of your request. This is the case if it can be deduced from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

2.10    Goldbeck Parking App

Our Parking App offers you the following functions

•    Overview of all parking spaces, car parks and garages in Germany and Austria
•    Information on the respective tariffs, opening hours and equipment
•    Information on the current distance (as the crow flies) and access possibilities
•    Navigation to the parking location, favourite memory and car finder function (incl. text and/or picture reminder)

The external services Google maps and Google Analytics are also used to provide this service. By downloading this App, a free contract for the use of the App is concluded with Goldbeck Parking Service GmbH, Ummelner Straße 4-6, 33649 Bielefeld. The legal basis for the data processing associated with this is thus the fulfilment of the contract in accordance with Art. 6 Para. 1 lit. b DSGVO.
This car park app is implemented by ilogs information logistics GmbH, Krone Platz 1, 9020 Klagenfurt, Austria within the scope of an order processing pursuant to Art. 28 DSGVO. The provider of the app is Goldbeck Parking Service GmbH, Ummelner Straße 4-6, 33649 Bielefeld, Germany, phone +49 521 04 88 -3711, e-mail info@goldbeck-parking.de

Collection of own location data
Our app only collects your location with your consent in order to use the current position or to determine parking garages in the vicinity. Your current location is only used on your device to identify the car parks in your vicinity and to request the current directions to these car parks. If access to the location has been granted, a transmission is sent to our server so that all car parks in the vicinity of the location can be displayed. 
The collection and transmission will only take place if you grant our app the appropriate permissions. The data will be stored temporarily in order to determine the requested information as well as to enable an appropriate error analysis (see section "Time of deletion"). You can disable access to the location data in the device settings.

Transmission of the IP address
When using the online services of our app (request for available parking spaces, connection search, etc.), the IP address is transmitted to the server to answer these requests. This is only used to transmit the requested information and to enable an appropriate error analysis (see section "Time of deletion").


Map material Google Maps
In our App we use the map material of Google maps, a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is an interactive (land) mapping service that visually displays geographic information. By using this service, you will be able to see the location of each stop. The use of this service is necessary for the functionality of this app and is based on our legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO as well as for the fulfilment of the existing usage agreement pursuant to Art. 6 para. 1 lit. b DSGVO.
Already when you access those pages in our app, in which the map of Google Maps is integrated, information about your use of our app (such as your IP address) is transmitted to servers of Google and stored there, this may also result in a transmission to the servers of Google LLC. in the USA. This happens regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not wish to be assigned to your profile on Google, you must log out before activating the button. In the event that personal data is transferred to Google LLC. based in the USA, Google LLC. has certified itself for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list
You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html. The additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html.
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy/ .
By downloading and using our app you agree to the use of Google maps within the Parking App. By deactivating the App, you can revoke your consent at any time with effect for the future.

Analysis with Google Analytics 
We use Google Analytics (including Google Analytics, an analysis service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, "Google") to improve our app offering. Google Analytics uses so-called "cookies", text files which are stored on your smartphone and which enable an analysis of your use of the app. The information generated by Google Analytics about your use of the App is usually transferred to a Google server in the USA and stored there for up to 14 months. Within our app, IP anonymisation has been activated so that the IP address of Google users within member states of the European Union or in other states that are party to the Agreement on the European Economic Area is shortened and thus made anonymous. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. 
Google is committed to complying with the EU-U.S. Privacy Shield Agreement published by the U.S. Department of Commerce regarding the processing of personal data from EU member states. For more information, please visit https://policies.google.com/privacy/frameworks?hl=de&gl=de. For more information about Google's privacy policy, please visit https://policies.google.com/privacy?gl=de. More information specifically about data collection by Google Analytics can be found here: https://support.google.com/firebase/answer/6318039?hl=de. 
On our behalf, Google will process the information collected to evaluate your use of the app, to compile reports on the activities and to provide us with further services associated with the use of the app. The IP address transmitted from your smartphone within the scope of Google Analytics is not combined with other data from Google. 
The legal basis for the processing of your data in connection with Google Analytics is Art. 6 para. 1 letter f) DSGVO (balancing of interests, based on our legitimate interest to statistically record the use of our App and to be able to improve on this basis) as well as your granted consent in accordance with Art. 6 para. 1 letter a DSGVO by downloading the App to your end device.
By downloading and using our App you agree to the use of Google Analytics and Google maps within the Parking App. By deactivating the App, you can revoke your consent at any time with effect for the future.

Date of cancellation
All requests received on the servers are temporarily stored for a few days (approx. 7 days) in a log file for the purpose of a possible error analysis. After that they are automatically deleted.

Accessing Camera for the Park Finder Function
For the function of the Parkfinder you need access to the camera of your end device. Access is only granted after you have agreed to this access. Without this authorization, the Parkfinder function cannot be used. You can disable access to the location data in the device settings.


2.11    Passing on your data 
We will only pass on your data to third parties if we are entitled or obliged to do so under the applicable law. An authorization exists if you give us your consent or third parties who process data on our behalf: If we do not carry out our business activities (e.g. operating the website, product adaptation, customer service, creating and sending advertising material, data analysis and, if necessary, data cleansing, payment processing) ourselves, but have them carried out by other companies, and if these activities are connected with the processing of your data, we have previously contractually obliged these companies to use the data only for the purposes permitted by law. We are authorised to control these companies in this respect.

In individual cases we may be legally obliged to pass on personal data to authorities or courts. The associated data processing is therefore based on a legal obligation.

If we use contract processors, we ensure through separate contracts (so-called contracts for contract data processing) that your data is protected by the processor in the same way as it is protected by us.
If you conclude a long-term parking rental agreement with us, we will pass on your data to the relevant parking technology manufacturers in order to provide you with the rented parking space and to enable you to enter and leave your rented parking space via the parking technology.

2.12    Transmission to other countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of using the services of third parties or disclosure or transfer of data to third parties, this will only take place if it is done to fulfil our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we will only process or transfer the data in a third country if the special requirements of Art. 44 ff. DSGVO. This means, for example, that the processing is carried out on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to that of the EU (e.g. for the USA through the "Privacy Shield") or compliance with officially recognised special contractual obligations (so-called "standard contractual clauses").

2.13    Data storage duration and deletion of data 
The data that you provide when creating your customer account will be stored until you cancel your customer account or until you have not logged into your customer account for a period of 2 years and we have therefore deleted your customer account. 
Otherwise, the data for ordering our services and those which we collect in the course of providing our services will be stored within the statutory retention periods of up to 10 years. If the data are required as evidence, they will be stored within the legal statute of limitations. According to §§ 195 ff BGB, these can be up to 30 years, whereby the regular limitation period ends after 3 years.Log files are deleted 7 days after collection. For applicant data, the deletion periods described under "Career" apply. 

2.14    Career
The "Career" link gives you the opportunity to find out about current vacancies at GOLDBECK. You can use our online portal or send your application documents to the e-mail address provided. Please ensure that you provide sufficient data protection. 
All data is used to process your application and thus for pre-contractual purposes in accordance with Art. 6 Avs. 1 lit. b DSGVO in conjunction with § 26 BDSG. The e-mail address is required in order to immediately confirm receipt of your application. Contact data is used to get in touch with you, e.g. to arrange a job interview.
Your applicant data will remain stored for up to 6 months after the desired training place or position has been awarded or, in the case of a speculative application, for 6 months after the rejection. Immediately after the award of the training place or position, the data of applicants who have not been awarded the contract will be blocked for any other use than the clarification of applicant claims. In the case of unsolicited applications, the data will be blocked after rejection. Any further storage and use of applicant data will only take place if you have given us your express consent to the further storage of your applicant data or in the case of a justified interest on the part of GOLDBECK, e.g. in the case of a duty of proof in legal proceedings. If an employment or training contract is concluded with an applicant, the data is stored and processed for the purpose of carrying out and processing the employment relationship and thus for contractual purposes.

2.13 Contact by e-mail

We can be contacted via the e-mail addresses provided. In this case, the personal data of the sender, i.e. the user, transmitted with the inquiry will be stored. In this context, we would like to point out that the transmission as unencrypted e-mail has certain security risks, as reading or unauthorized access cannot be excluded. The processing of this data, which is transmitted in the course of sending an enquiry, is based on the legal basis of Art. 6 Par. 1 lit. f. DSGVO of our legitimate interests to answer your request satisfactorily. If the enquiry aims at the fulfilment of an existing contract or the conclusion of a new one, an additional legal basis for the processing is Art. 6 para. 1 lit. b. DSGVO for the initiation/performance of a contract. The processing of this personal data serves us to process the contact. Your data will be deleted as soon as they are no longer required for the purpose of their collection. For personal data sent by e-mail, this is the case when the respective request has been answered and the conservation with the user has ended. The conversation is finished when it can be concluded from the circumstances that the matter in question has been finally clarified and no contract has been concluded. Inquiries regarding the contractual relationship are stored for the duration of the existing contractual relationship.
In this case, all personal data stored in the course of the contact will be deleted, unless there are legal retention periods to the contrary.


2.14     Legal and contractual obligations to provide 

The provision of personal data is partly required by law (e.g. tax regulations) or also results from contractual regulations (e.g. information on the contractual partner). For the conclusion of a contract it is necessary that you provide us with personal data. Without this data, we will usually have to refuse to conclude the contract or be unable to perform an existing contract and may have to terminate it. If there is a legal obligation to provide the data, you are obliged to provide us with personal data. If you do not provide the data, we cannot establish the desired business relationship. Before the person concerned makes personal data available, he or she can contact our data protection officer. Our data protection officer will inform the data subject on a case-by-case basis whether the provision of personal data is required by law or contract or is necessary for the conclusion of a contract, whether there is an obligation to provide the personal data and what the consequences would be if the personal data were not provided. 

3    Your rights (opposition, revocation, information, correction, blocking, deletion, transfer, complaint)

3.1    Opposition
You can object to the processing of personal data by us at any time for reasons arising from your particular situation. For this purpose you can use the contact options mentioned in section 1. If you object, we will no longer process your personal data, unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms.

3.2    Revocation
You also have the right to revoke any consent you have given with effect for the future. However, the legality of the data processing based on your consent remains unaffected by this until receipt of your revocation.

3.3    Other rights 
You have the right at any time and free of charge to obtain information about your personal data stored by us, to correct incorrect data and to block or delete data. You also have the right to receive your data in a structured, common and machine-readable format and to have your data transferred by us to someone else. Finally, you have the right to complain to a data protection authority.
With the exception of your right to complain to the data protection authority, you can address your respective concern to us by using the contact data mentioned in section 1.

Changes to the data protection information

This data protection information is continuously adapted in the course of the further development of our offer. We will announce changes on this page in good time. In order to keep yourself informed about the current status of our data use regulations, this page should be called up regularly. (Current status: June 2020)