In the following, we will inform you about the collection of personal data when you use our website and when you contact us using a contact form, by e‑mail or by telephone. Personal data is any data that can be personally related to you, such as name, address, e‑mail addresses and user behaviour.

I. Name and contact details of the controller and of the data protection officer

The controller within the meaning of Art. 4 (7) of the General Data Protection Regulation (GDPR) is Charlie Living Service GmbH, Wirtgen Campus 1, 53577 Neustadt (Wied), p +49 30 5771 3622 1, f +49 30 5771 3622 9, info@charlie-living.de.

II. General information about the collection, transfer and storage of personal data

We process your personal data in compliance with the provisions of the GDPR, the Federal Data Protection Act (BDSG, Bundesdatenschutzgesetz) and all other relevant laws.
The main purpose of data processing is to establish and fulfil a contractual relationship with you. When you contact us by e‑mail, via a contact form or by telephone, the data you provide (your e‑mail address and, if applicable, your name and telephone number) will be stored by us in order to answer your questions. The primary legal basis for this is Art 6 (1) lit. b) GDPR. In addition, your separate consent pursuant to Art. 6 (1) lit. a), Art. 7 GDPR may also be used as consent within the meaning of data protection law. We also process your data in order to fulfil our legal obligations, specifically in the field of commercial and tax law. The basis for this is Art. 6 (1) lit. c) GDPR. In as far as this is necessary, we also process your data on the basis of Art. 6 (1) lit. f) GDPR in order to protect our legitimate interests or those of third parties.
Your personal data will not be transferred to third parties for any purposes other than those listed below. We will only disclose your personal data to third parties if you have given your express consent pursuant to Art. 6 (1) lit. a) GDPR, if disclosure pursuant to Art. 6 (1) lit. f) GDPR is necessary in order to establish, exercise or defend legal claims and if there is no reason to assume that you have an overriding legitimate interest in preventing disclosure of your data, if disclosure is required by law pursuant to Art. 6 (1) lit c) GDPR and if disclosure is permitted by law and required pursuant to Art. 6 (1) lit. b) GDPR for the purpose of handling contractual relationships with you.
In as far as we use contracted contractors for individual functions of our offering or are planning to use your data for advertising purposes, we will inform you in detail about the respective processes below. In this context, we will also specify the criteria defined for the storage period.
We will erase your personal data as soon as such data is no longer required for the following purposes. After termination of the contractual relationship, your personal data will be stored as long as we are legally obliged to do so. This typically results from legal verification and storage obligations which are laid down, among other things, in the Commercial Code (HGB, Handelsgesetzbuch) and Fiscal Code of Germany (AO, Abgabenordnung). Pursuant to these laws, storage periods can be as long as ten years. Furthermore, personal data may be stored for the period during which claims can be established against us (subject to a statutory limitation period of three or up to thirty years).

III. Collection of personal data on our website

Visit to our website

1.1 When you use the website for information purposes only, i.e. if you do not register or provide us with any other information, we only collect the personal data which your browser sends to our server. If you wish to view our website, we collect data that is technically necessary for us to display our website to you and to ensure stability and security. The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. This data includes the IP address, the date and time of the request, the difference between the user’s time zone and Greenwich Mean Time (GMT), the content of the request (specific page), the access status/HTTP status code, the data volume transmitted in each case, the website where the request originates, the browser, operating system and its interface as well as the language and version of the browser software.

1.2 The legal basis for the temporary storage of data and log files is Art. 6 (1) lit. f) GDPR.

1.3 Temporary storage of the IP address by the system is necessary in order to enable the website to be delivered to your browser. This requires your IP address to be stored during the entire duration of the session. The data is stored in log files in order to ensure the functionality of the website. Furthermore, we use the data in order to optimise the website and to ensure the security of our information technology systems. These purposes are also the basis of our legitimate interest in data processing as contemplated in Art. 6 (1) lit. f) GDPR. The data will not be evaluated for marketing purposes in this context.

1.4 The data will be erased as soon as it is no longer necessary in order to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session ends. Log files are deleted within 7 days after the website has been visited.

1.5 The collection of data when you visit the website and the storage of data in log files are indispensable for the operation of the website. This means that you do not have a right to object.

Use of cookies

2.1 When you use our website, cookies are stored on your computer system. Cookies are text files that are stored in and/or by the web browser on your computer system. When you visit a website, a cookie may be stored in your operating system. This cookie contains a characteristic character string that enables unique identification of the browser when the website is visited again.

2.2 This website uses the following types of cookies whose scope and principles of function are explained below:

transient cookies (temporary use)
persistent cookies (use for a finite period of time)
third-party cookies (from third-party providers according to separate information)

2.3 Transient cookies are automatically deleted when you exit your browser. This type of cookies specifically includes session cookies. Session cookies store a so-called session ID that enables different queries of your browser to be assigned to the common session. In this way, your computer can remembered when you visit our website again. Session cookies are deleted when you log out or exit your browser. The legal basis for the processing of personal data using transient cookies is Art. 6 (1) lit. f) GDPR. The purpose of using these cookies is to enhance your user experience when you visit a website. Some functions of our website cannot be offered without the use of cookies. This means that the browser must be remembered even after you have visited other pages or websites. These purposes are also the basis of our legitimate interest in the processing of personal data as contemplated in Art. 6 (1) lit. f) GDPR.

2.4 Persistent cookies are used exclusively in conjunction with the web analytics services used by us and only for as long as the purpose requires; they have a maximum lifetime of two years. You can delete cookies at any time in the security settings of your browser. The functions and user-friendliness of the offering may then be restricted. The legal basis for the processing of personal data using persistent cookies is Art. 6 (1) lit. f) GDPR. The analysis cookies are used in order to improve the quality of our website and its content. The analysis cookies inform us on how the website is used, so that we can continuously optimise our offering. These purposes are also the basis of our legitimate interest in the processing of personal data as contemplated in Art. 6 (1) lit. f) GDPR.

2.5 Cookies, which are technically not necessary for the provision of our service, are only set with your consent which you can withdraw at any time. When you continue using the website with the corresponding browser settings, you consent to the use of cookies within the scope of this privacy statement. You can hence communicate your consent to us by setting your browser accordingly, for instance, by determining that you wish to be informed whenever cookies are set and that you do not accept any cookies unless you expressly confirm this. In this way, you can also choose to accept cookies in certain cases or in general. You can configure your browser settings according to your needs and decide, for instance, whether you wish to accept or reject third-party cookies or all cookies. You should note, however, that this may result in you not being able to use all of the functions of this website. The legal basis for the processing of personal data using cookies for analytical purposes with a corresponding consent by the user is Art. 6 (1) lit. a) GDPR.

Further functions and offerings of our website

3.1 Besides the use of our website for purely informational purposes, we also offer various services which you can use if you are interested. This usually means that you have to enter further personal data which we use in order to provide the respective service and which is subject to the aforementioned data processing rules.

3.2 We sometimes also outsource the processing of your data to external service providers who are carefully selected and commissioned by us and who are bound by our instructions and subject to regular checks.

3.3 Furthermore, we may forward your personal data to third parties if we offer participation in promotions and competitions as well as the conclusion of contracts or similar services together with partners. For more information, please enter your personal data or refer to the description of the offering below.

3.4 In as far as our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this fact in the description of the offering.

Use of Google Analytics

4.1 This website uses Google Analytics, a web analysis service of Google Ireland Limited (“Google”). Google Analytics uses so-called “cookies”, i.e. text files which are stored on your computer and enable your usage of the website to be analysed. The information generated by the cookie regarding your usage of this website is normally sent to a Google server in the US and stored there. However, in the event that the IP anonymization feature is activated on this website, Google will first set the last digits of your IP address to zero in member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the US and shortened there. On behalf of the operator of this website, Google uses this information in order to evaluate your usage of the website, compile reports on website activities and provide further services to the website operator related to website and Internet usage.

4.2 The IP address transmitted by your browser in conjunction with Google Analytics will not be combined by Google with other data.

4.3 You can prevent the storage of cookies by making the appropriate settings in your browser software. Please note, however, that you may then be unable to use all functions of this website. You can also download and install the browser plugin from the link below in order to prevent the capture of the data (including your IP address) generated by cookies and related to your usage of the website as well as its transmission to and processing by Google: http://tools.google.com/dlpage/gaoptout?hl=en.

4.4 This website uses Google Analytics with the “_anonymizeIp()” extension. As a result, IP addresses are further processed in an abbreviated form, so that no reference to a concrete individual is possible. In as far as you as an individual can be identified from the data collected about you, this will be disabled immediately and the personal data thereby deleted immediately.

4.5 We use Google Analytics in order to analyse and continuously improve the use of our website. The statistical information thereby generated helps us to improve our offering and to make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the US, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 (1) lit. f) GDPR.

4.6 Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001, terms of use: http://www.google.com/analytics/terms/de.html, privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html as well as the privacy statement: http://www.google.de/intl/de/policies/privacy.

Integration of Google Maps

5.1 On our website, we use the offering of Google Maps. This allows us to display interactive maps directly on the website and enables the user-friendly use of the map function. The legal basis for the use of Google Maps is Art. 6 (1) lit. f) GDPR.

5.2 By visiting the website, Google is informed that you visited the corresponding subpage of our website. The data referred to in section III. 1. of this privacy statement is additionally transmitted, irrespective of whether Google provides a user account to which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly associated with your account. If you do not wish to be associated with your profile at Google, you must log out before clicking the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or the demand-oriented design of its website. The main purpose of such evaluation (even for users who are not logged in) is to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the generation of such user profiles, in which case you will have to address this request to Google.

5.3 Further information regarding the purpose and scope of the collection and processing of data by this provider can be found in the provider’s privacy statement where you will also find further information about your rights in this regard as well as setting options in order to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the US and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Opt-Out: https://adssettings.google.com/authenticated

Integration of Google Fonts

6.1 On our website, we use the offering of Google Fonts. We use this service in the interest of a uniform and attractive presentation of our website. When you visit a website, your browser loads the required web fonts into your browser cache in order to ensure the correct display of text and fonts. If your browser does not support web fonts, your computer will then use a default font. The legal basis for the use of Google Fonts is Art. 6 (1) lit. f) GDPR.

6.2 By visiting the website, Google is informed that you visited the corresponding subpage of our website. The data referred to in section III. 1. of this privacy statement is additionally transmitted, irrespective of whether Google provides a user account to which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly associated with your account. If you do not wish to be associated with your profile at Google, you must log out before clicking the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or the demand-oriented design of its website. The main purpose of such evaluation (even for users who are not logged in) is to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the generation of such user profiles, in which case you will have to address this request to Google.

6.3 Further information regarding the purpose and scope of the collection and processing of data by this provider can be found in the provider’s privacy statement where you will also find further information about your rights in this regard as well as setting options in order to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the US and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Opt-Out: https://adssettings.google.com/authenticated

Use of Google Ads Conversion

7.1     We use the services of Google Ads to draw attention to our attractive offers with the help of advertising materials (so-called Google Ads) on external websites. We can determine in relation to data collected during advertising campaigns how successful each individual advertising measure is. This enables us to pursue our interest in showing you advertisements that are of interest to you, making our website more interesting for you and ensuring the fair calculation of advertising costs.

7.2     The advertising materials are delivered by Google via so-called “ad servers”. We therefore use ad server cookies to measure specific parameters for success such as pop-up advertisements or user clicks. If you access our website via a Google ad, Google Ads will store a cookie on your device. These cookies generally expire after 30 days and are not intended to identify you personally. The cookie generally stores analytical data in the form of a unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (a note signalling that the user no longer wishes to be addressed).

7.3     These cookies enable Google to recognise your internet browser. If a user visits certain pages on an Ads customer’s website and the cookie stored on their device has not expired, Google and the customer can detect that the user has clicked on the ad and has been redirected to this page. A different cookie is assigned to each Ads customer. Cookies therefore cannot be traced via the websites of Ads customers. We ourselves do not collect or process any personal data within the context of the aforementioned advertising measures. Google only provides us with statistical evaluations. These evaluations enable us to identify which of the advertising measures used are particularly effective. We do not receive any additional data on the use of the advertising materials; more specifically, the information available to us does not enable us to identify specific users.

7.4     As a result of the marketing tools used your browser will automatically establish a direct connection to the Google server. We have no influence on either the scope of the data collected by Google using this tool or the way in which it is used. The following information is therefore provided to the best of our knowledge: As a result of the integration of Ads Conversion into our website, Google receives notification that you have accessed a specific section of our website or clicked on one of our advertisements. If you are registered with a Google service, Google is able to match your visit to your account. Even if you are not registered with Google or have not logged in, it is still possible for the provider to obtain and store your IP address.

7.5     You can avoid participating in this tracking process in various ways: a) by adjusting the corresponding settings in your browser software (example: if you elect to block third-party cookies you will no longer receive any ads from third-party providers); b) by disabling conversion tracking cookies by setting your browser to block cookies from the domain “www.googleadservices.com” (also see https://www.google.com/settings/ads; please note that this setting is deleted each time you delete your cookies); c) by disabling interest-based ads from providers participating in the “About Ads” self-regulation campaign at http://www.aboutads.info/choices (please note that this setting is deleted each time you delete your cookies); d) by permanently disabling cookies in your browser (Firefox, Internet Explorer or Google Chrome) by installing the plugin available at http://www.google.com/settings/ads/plugin. Please note that if you permanently disable cookies you may not be able to make full use of all functions available on this website.

7.6     The prerequisites for the lawful use of Google Ads are defined in GDPR, s 6(1)(a). Further information on Google’s privacy policy is available at http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. You can also visit the website operated by the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google undertakes to process your data in compliance with the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).

Data security

We also use suitable technical and organisational security measures in order to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological progress.

IV. Collection of personal data when you contact us by e‑mail, post or telephone

Collection of personal data from customers, prospective customers and suppliers

1.1 We only collect your personal data as a customer, prospective customer or supplier if you give us this data voluntarily by e‑mail, post or telephone. In this context, we collect the information which is generated when you contact us. This specifically includes names and contact data given to us as well as the date and reason for contacting us. Your personal data collected by you will only be used for the purpose of providing you with the desired products or services (legal basis: Art. 6 (1) lit. b) GDPR) or for other purposes for which you have given your consent (legal basis. Art. 6 (1) lit. a) GDPR) and which are described in this privacy statement. You can withdraw your consent to the processing of personal data at any time.

1.2 You are not obliged to provide the aforementioned personal data. The data provided may be necessary in order to conclude a contract. Without the provision of the data, there is a risk that it will not be possible to communicate or to conclude or perform a contract.

1.3 The data, which is relevant from case to case, will be transmitted on the basis of the statutory provisions or a contract to public authorities if overriding legal provisions exist, to external service providers or other contractors and to other external parties if you have given your consent or if such transmission is permissible due to an overriding interest. We have no intention to transfer your data to a recipient in a third country (not an EU/EEA Member State) or to an international organisation.

1.4 The data will be erased as soon as it is no longer necessary in order to achieve the purpose for which it was collected. With regard to the personal data provided, this will happen when the respective conversation with you ends. The conversation is deemed to be over when circumstances suggest that the facts in question are finally clarified. In as far as the data disclosed to us is subject to storage obligations under tax and commercial law, such data will be stored for the mandatory storage period of ten years and then erased, unless you have consented to a longer storage period or unless further processing of the data is necessary for the establishment, exercise or defence of legal claims. The legal basis for the processing of personal data for the purpose of abiding by statutory archiving and storage obligations is Art. 6 (1) lit. c) GDPR.

Collection of personal data from applicants

2.1 We only collect your personal data as an applicant if you give us this data voluntarily by e‑mail, post or telephone. This applies to both applications for job vacancies and unsolicited applications. In this context, we collect the information which you give us in your job application. This specifically includes your name, date of birth, contact details, interests, qualification information as well as educational and professional history. Your personal data collected by us will only be used for the purpose of handling the application procedure (legal basis: Art. 6 (1) lit. a), b) and f) GDPR, sec. 26 of the Federal Data Protection Act (BDSG, Bundesdatenschutzgesetz).

2.2 You are not obliged to provide the aforementioned personal data. The data provided may be required for a future contract to be concluded after the application procedure has been completed. Without the provision of the data, there is a risk that it will not be possible to communicate, to perform the application procedure or to conclude a contract.

2.3 The data, which is relevant from case to case, will be transmitted on the basis of the statutory provisions or a contract. Data is transmitted to employees of the HR department, members of executive management and the respective head of department. Your personal data will not be transferred to third parties. We have no intention to transfer your data to a recipient in a third country (not an EU/EEA Member State) or to an international organisation.

2.4 The data will be erased as soon as it is no longer necessary in order to achieve the purpose for which it was collected. If your application was not successful, we will therefore store your data after completion of the application procedure for a period of six months from the date of informing you that your application was rejected. If you have consented to a longer storage period, the storage period then totals two years. We will then either erase your data or ask you for your consent again. You can withdraw your consent to the processing of personal data at any time.

V. Objection to the processing of your data or withdrawal of your consent

If you have given your consent to the processing of your data, you can withdraw this consent at any time. Such withdrawal impacts the permissibility of the processing of your personal data after you have declared such withdrawal to us.
If the processing of your personal data by us is based on the weighing of interests, you may object to the processing. This is especially the case if processing is not necessary in order to perform a contract with you as described by us in the description of functions below. When exercising such right to object, we will request that you explain the reasons why we should not process your personal data as practised. Should your objection be justified, we will examine the facts and either discontinue or modify the processing of your data or explain to you our compelling legitimate reasons on the basis of which we will continue the processing.
It goes without saying that you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can send us your objection to receiving advertising material under the following contact details: Charlie Living Service GmbH, Wirtgen Campus 1, 53577 Neustadt (Wied), p +49 30 5771 3622 1, f +49 30 5771 3622 9,
datenschutz[at]trockland.com.

VI. Your rights

Pursuant to Art. 15 GDPR, you have the right to request information about your personal data processed by us. You can, in particular, request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the envisaged storage period, the existence of a right to request rectification, erasure, restriction of processing or objection, the right to lodge a complaint, the source of any of your data not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on the related details.
Pursuant to Art. 16 GDPR, you have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you which we have stored. Pursuant to Art. 17 GDPR, you have the right to request the erase of your personal data stored by us, unless the processing is necessary in order to exercise the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
Pursuant to Art. 18 GDPR, you have the right to obtain restriction of processing of your personal data if you contest the accuracy of the data, if the processing is unlawful and if you oppose the erasure of such data and if we no longer need the data, but if you need such data in order to establish, exercise or defend legal claims or if you have objected to the processing pursuant to Art. 21 GDPR.
Pursuant to Art. 20 GDPR, you have the right to receive the personal data you have given to us in a structured, commonly used and machine-readable format or to request its transmission to another controller.
Pursuant to Art. 7 (3) GDPR, you have the right to withdraw your consent at any time. This means we are no longer allowed in the future to process the data based on such withdrawn consent.
Pursuant to Art. 77 GDPR, you also have the right to lodge a complaint with a supervisory authority regarding the processing of your personal data by us, for example, with the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Friedrichstraße 219, 10969 Berlin, telephone: 030/138 89‑0, e‑mail: mailbox[at]datenschutz-berlin.de, as the supervisory authority responsible for us.

VII. Up-to-dateness and revision of this privacy statement

This privacy statement is currently in effect as of May 2018.
In view of the further development of our website and offerings on this website, or as a result of changed legal or regulatory requirements, it may become necessary to revise this privacy statement. The latest privacy statement can be downloaded from the website at https://charlie-living.de/en/imprint-data-privacy/ and printed at any time.