DSGVO
Privacy Notice
We take the protection of your personal data seriously and comply with the applicable data protection laws, particularly the EU General Data Protection Regulation (EU GDPR) and the Federal Data Protection Act (BDSG), as well as this privacy notice. We process personal data of our users only as far as it is necessary to provide a functional website and our content, services, offers, etc.
Personal data refers to all information relating to an identified or identifiable natural person.
This privacy notice provides an overview of the type of personal data that is processed and for what purpose. Furthermore, it explains how we ensure the protection of your personal data.
1. Name and Contact Details of the Controller
This privacy notice applies to the data processing carried out by the following controller:
time4staying UG
Kantstrasse 99
10627 Berlin
Germany
Email: info@time4staying.com
Website: www.time4staying.com
2. Collection and Storage of Personal Data, and the Type and Purpose of Its Use
a) When Visiting Our Website
You can visit our website, www.time4staying.com, without providing any personal information (without identifying yourself).
When you use our website purely for informational purposes, meaning you do not register or provide any personal information, we collect only the personal data that your browser sends to our server. When you visit our website, www.time4staying.com, information is automatically transmitted by the browser used on your device to the server of our website. This information is temporarily stored in what is known as a log file.
​
The following information is collected without your input and stored until it is automatically deleted:
-
IP address of the requesting computer,
-
Date and time of access,
-
Name and URL of the retrieved file,
-
Website from which access is made (referrer URL),
-
Browser used, possibly including the operating system of your computer, and the name of your access provider, as well as the language and version of the browser software.
These data are processed for the following purposes:
-
Ensuring a smooth connection to the website,
-
Ensuring comfortable use of our website,
-
Evaluating system security and stability, and
-
Other administrative purposes.
The legal basis for data processing is Article 6(1)(f) of the EU GDPR. Our legitimate interest stems from the purposes listed above for data collection. Under no circumstances do we use the collected data to draw conclusions about your identity.
Additionally, we use cookies when you visit our website. Cookies do not cause any damage to your computer and do not contain viruses. More detailed information can be found under section 5 of this privacy notice.
b) When Using Our Webshop
When you use our webshop (e.g., by submitting offers, accepting our offers, registering, or through other communication), we process the personal data you provide solely for the purpose of initiating or fulfilling a contract.
The legal basis for this data processing is Article 6(1)(b) of the EU GDPR. This means that data processing is necessary for the conclusion or performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract.
​
When using our webshop, the following personal data provided by you is processed:
-
First and last name (for companies: company name)
-
Address
-
Telephone number (landline and/or mobile)
-
Fax number (if available)
-
Email address
The processing of this data is carried out for the purpose of fulfilling contractual obligations, specifically for sending goods, processing payments (including invoicing), handling any warranty claims, and any other related correspondence with you.
c) Contact Form
We provide a contact form on our website so that you can send us your questions, comments, feedback, etc. To use this form, you are required to provide your name and email address so that we know who to respond to; additional information is optional.
The legal basis for processing this data is your voluntarily given consent (Article 6(1)(a) of the EU GDPR).
The personal data collected for the use of the contact form will be deleted once your inquiry has been processed.
d) Newsletter Subscription
If you have expressly given consent (Article 6(1)(a) of the EU GDPR), you can subscribe to our newsletter, in which we inform you about current offers in the field of goods and/or services. The goods and/or services promoted in the newsletter are outlined in the consent declaration. The only required information for receiving the newsletter is your email address. Any additional data marked as optional is used to personalize your communication.
We use the double opt-in process for newsletter registration. This means that after signing up, we send an email to the specified address asking for confirmation that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be locked and automatically deleted after one month. Additionally, we log your IP addresses and the times of registration and confirmation. The purpose of this process is to verify your registration and to clarify any potential misuse of your personal data.
​
The legal basis for this data processing is your voluntarily given consent (Article 6(1)(a) of the EU GDPR). You can revoke your consent to receive the newsletter at any time and unsubscribe from it. To do so, you can send an email with your request to unsubscribe to info@time4staying.com.
e) Processing Based on Legitimate Interests
If necessary for our business purposes, we process your data—apart from contract initiation or fulfillment or your explicitly given consent—to protect the legitimate interests of our company, provided that a balancing of interests does not result in your fundamental rights and freedoms, which require the protection of personal data, taking precedence (see Article 6(1)(f) of the EU GDPR). Legitimate interests of our company include:
-
Direct advertising, unless you have objected to the use of your personal data for this purpose.
3. Disclosure of Data to Third Parties
Your personal data will not be transferred to third parties for purposes other than those listed below. In particular, your data will not be shared with third parties for advertising purposes without your explicit consent.
We only share your personal data with third parties if:
-
You have given your explicit consent in accordance with Article 6(1)(a) of the EU GDPR;
-
This is necessary for the fulfillment of contractual relationships with you in accordance with Article 6(1)(b) of the EU GDPR, e.g., to financial institutions for the processing of agreed payments, to shipping and logistics companies for the purpose of shipping goods, including shipment tracking, or in the event of non-fulfillment of agreed payments, to lawyers or legal service providers for legal enforcement;
-
There is a legal obligation to disclose data in accordance with Article 6(1)(c) of the EU GDPR; or
-
Disclosure is necessary for the assertion, exercise, or defense of legal claims in accordance with Article 6(1)(f) of the EU GDPR, and there is no reason to assume that you have an overriding interest in the non-disclosure of your data.
4. Cookies
We use cookies on our website. These are small text files that are automatically created by your internet browser and stored on your device (e.g., PC, laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any harm to your device, nor do they contain viruses, trojans, or other malware. The information stored in the cookie relates specifically to the device being used. However, this does not mean that we can directly identify you through this information.
The use of cookies helps make your experience with our services more convenient. For example, we use cookies to recognize if you have visited individual pages of our website before. These cookies are automatically deleted once you leave our site. Additionally, we use cookies to improve user-friendliness, which are stored on your device for a specified period. When you return to our website to use our services, the system will automatically recognize that you have visited us before and recall your previous inputs and settings, so you don’t have to enter them again.
There are two types of cookies to distinguish: those that are necessary for the functionality of this website (necessary cookies) and those that are not essential for the operation of the website (non-necessary cookies).
Without the use of necessary cookies, this website will not function properly. These cookies are only used by us (so-called First Party Cookies), and all the information stored in these cookies is only sent to this website.
Necessary cookies are used regardless of your consent. The legal basis for processing data in this case is our legitimate interest, meaning our interest in analyzing, optimizing, and economically operating our website and services (Article 6(1)(f) of the EU GDPR).
Non-necessary cookies used by us can be categorized into preference, statistics, and marketing cookies. Marketing cookies are used by external companies (so-called Third Party Cookies) to collect information about websites you have visited in order to create targeted advertising, for example.
​
Non-essential Cookies
Non-essential cookies are only used after you have given your consent. By providing your consent to the use of the cookies listed in our consent tool on this website, you agree to the use of those cookies. The legal basis for data processing in this case is your consent (Article 6(1)(a) of the EU GDPR).
You can adjust your cookie settings at any time using the consent tool, enabling or disabling individual cookies, except for the necessary cookies.
You can also set your web browser to generally prevent cookies from being stored on your device or to ask you each time if you agree to the setting of cookies. Cookies that have already been set can be deleted at any time. Instructions on how to do this can be found in the help section of your respective web browser.
Please note that a general deactivation of cookies may lead to limitations in the functionality of this website.
5. Data Retention and Deletion
Your personal data will be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed (Article 17(1)(a) of the EU GDPR). This means data will be deleted unless its retention is required for fulfilling a legal obligation under Union or Member State law, to which the controller is subject (Article 17(3)(b) of the EU GDPR), or for the establishment, exercise, or defense of legal claims (Article 17(3)(e) of the EU GDPR).
For example, legal obligations include statutory retention periods, such as the 10-year retention period for accounting records (including order and payment data) according to Section 147(1)(4), (3) sentence 1 of the German Fiscal Code (AO), or the 6-year retention period for commercial correspondence, such as email messages, according to Section 257(1)(2)(3), (4) of the German Commercial Code (HGB). During the retention period, data will be blocked, and once the period has expired, the data will be deleted.
​
6. Data Subject Rights
You have the right to:
-
Withdraw consent: In accordance with Article 7(3) of the EU GDPR, you can revoke your previously given consent at any time. As a result, we will no longer be able to process data based on this consent in the future. The legality of the data processing carried out up until the revocation remains unaffected by your withdrawal.
-
Request access: In accordance with Article 15 of the EU GDPR, you can request information about the personal data we have processed about you. This includes details about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of rights to rectification, deletion, restriction of processing, or objection, the right to lodge a complaint, the source of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling, and meaningful information about the details thereof.
-
Request rectification: In accordance with Article 16 of the EU GDPR, you can request the immediate correction of inaccurate or incomplete personal data stored by us.
-
Request deletion: In accordance with Article 17 of the EU GDPR, you can request the deletion of your personal data stored by us unless processing is necessary for the exercise of the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims.
-
Request restriction of processing: In accordance with Article 18 of the EU GDPR, you can request the restriction of processing of your personal data if you contest the accuracy of the data, the processing is unlawful, but you oppose its deletion, we no longer need the data, but you require it for the assertion, exercise, or defense of legal claims, or you have objected to processing in accordance with Article 21 of the EU GDPR.
-
Data portability: In accordance with Article 20 of the EU GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request the transfer of this data to another controller.
-
Right to lodge a complaint: In accordance with Article 77 of the EU GDPR, you can file a complaint with a supervisory authority. The competent supervisory authority is the data protection officer of the federal state where our company is located. An overview of data protection officers and their contact information can be found at BFDI – Data Protection Authorities.
7. Right to Object
If your personal data is processed based on legitimate interests pursuant to Article 6(1)(f) of the EU GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 of the EU GDPR, provided there are reasons arising from your particular situation. In the event of your justified objection, we will review the situation and either stop or adjust the data processing or provide compelling legitimate grounds for continuing the processing.
If your personal data is being processed by us for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising.
If you wish to exercise your right to withdraw consent or object, an email to info@time4staying.com is sufficient.
8. Data Security
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
We also use SSL or TLS encryption (SSL = Secure Sockets Layer; TLS = Transport Layer Security; SSL is the predecessor of TLS) during your visit to our website. You can recognize the encrypted connection by the prefix "https://" in the address bar of the browser and the lock icon preceding the browser bar.
10. Current Version and Potential Changes to this Privacy Policy
This privacy policy is valid as of June 2020.
Due to technical developments and/or changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. You can tell if changes have been made by checking if the "version" of the document in the first paragraph of this section 10 has been updated.
You can access and print the current privacy policy at any time on our website at www.time4staying.com/dsgvo.