Source: https://urbanauth.eu/privacy-policy-eng/
Timestamp: 2019-04-23 19:55:24+00:00

Document:
Your privacy is important to us. It is Urbanauth’s policy to respect your privacy regarding any information we may collect from you across our website, http://urbanauth.eu, and other sites we own and operate, like http://urbanaut.eu.
This data protection statement clarifies the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) in the context of the provision of our online services and offer as well as associated websites, functions and content and external online presence, such as our social media profile (hereinafter jointly referred to as “online offer”). As regards the terms used, such as “processing” or “controller”, we refer to the definitions in Article 4 of the Basic Data Protection Regulation (DGPS).
“The Responsible” means any natural or legal person, public authority, agency or body which alone or jointly with others decides on the purposes and means of the processing of personal data.
“processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the responsible.
Art. 6 para. 1 lit. d GPDR serves as the legal basis in the event that vital interests of the data subject or another natural person necessitate the processing of personal data.
The legal basis for the processing necessary to perform a task which is in the public interest or in the exercise of official authority entrusted to the data controller is Art. 6 para. 1 lit. e GPDR. The legal basis for the processing to safeguard our legitimate interests is Art. 6 para. 1 lit. f GPDR.
The processing of data for purposes other than those for which they were collected is governed by the provisions of Art. 6 (4) GPDR.
The processing of special categories of data (pursuant to Art. 9 para. 1 GPDR) is governed by the provisions of Art. 9 para. 2 GPDR.
Measures shall include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to, access to, inputting, disclosure, securing and separation of data. In addition, we have established procedures to ensure the exercise of data subjects’ rights, the deletion of data and the response to data threats. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and processes, in accordance with the principle of data protection through technology design and data protection-friendly default settings.
To the extent that we disclose data to other persons and companies (contract processors, jointly responsible persons or third parties) within the scope of our processing, transfer them to them or otherwise grant them access to the data, this shall only take place on the basis of legal permission (e.g. if a transfer of the data to third parties, such as payment service providers, is necessary for the fulfilment of the contract), users have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
“Cookies” are small files that are stored on the user’s computer. Different data can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after the user’s visit to an online service. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online offer and closes his browser. The content of a shopping basket in an online shop or a login status, for example, can be stored in such a cookie. Cookies are referred to as “permanent” or “persistent” and remain stored even after the browser is closed. For example, the login status can be saved if users visit it after several days. The interests of the users who are used for range measurement or marketing purposes can also be stored in such a cookie. Third party cookies” are cookies that are offered by providers other than the person responsible for operating the online service (otherwise, if they are only the latter’s cookies, they are referred to as “first party cookies”).
If users leave comments or other contributions, their IP addresses may be stored on the basis of our legitimate interests within the meaning of Art. 6 Para. 1 lit. f. of the German Data Protection Act. GPDR for 7 days. This is done for our security, if someone leaves illegal contents (insults, forbidden political propaganda, etc.) in comments and contributions. In this case we can be prosecuted ourselves for the comment or contribution and are therefore interested in the identity of the author.
Furthermore, we reserve the right, on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f. GPDR to process the information provided by the user for the purpose of spam detection.
Subsequent comments may be subscribed to by users with their consent pursuant to Art. 6 para. 1 lit. a GPDR. Users receive a confirmation email to check whether they are the owner of the email address entered. Users can unsubscribe from ongoing comment subscriptions at any time. The confirmation email will contain information on the cancellation options. For the purposes of proving the users’ consent, we store the registration time and the IP address of the users and delete this information when users unsubscribe from the subscription.
You can cancel the receipt of our subscription at any time, i.e. revoke your consent. We may store the unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before deleting them in order to be able to provide evidence of a previously given consent. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for deletion is possible at any time, provided that the former existence of a consent is confirmed at the same time.
Our online service uses the “Akismet” service provided by Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA. The use is based on our legitimate interests in the sense of Art. 6 para. 1 lit. f) GPDR. With the help of this service, comments of real people are distinguished from spam comments. All comments are sent to a server in the USA, where they are analyzed and stored for four days for comparison purposes. If a comment has been classified as spam, the data is stored beyond this time. This information includes the name entered, the email address, the IP address, the comment content, the referrer, information about the browser used, the computer system and the time of the entry.
When contacting us (e.g. via contact form, e-mail, telephone or via social media), the user’s details are used to process the contact enquiry and to process it in accordance with Art. 6 Para. 1 lit. b. of the German Data Protection Act. (within the framework of contractual/pre-contractual relationships), Art. 6 Para. 1 lit. f. (other inquiries) GPDR processed. The user data can be stored in a customer relationship management system (“CRM system”) or comparable inquiry organization.
The dispatch of the newsletter and the performance measurement associated with it are based on the consent of the recipients in accordance with Art. 6 Para. 1 lit. a, Art. 7 GPDR in conjunction with § 7 Para. 2 No. 3 UWG or, if consent is not required, on our legitimate interests in direct marketing in accordance with Art. 6 Para. 1 lt. f. GPDR in connection with § 7 Abs. 3 UWG.
The registration procedure is recorded on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GPDR. Our interest is directed towards the use of a user-friendly and secure newsletter system that serves our business interests as well as the expectations of the users and furthermore allows us to provide evidence of consent.
Here we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors to this online service on the basis of our legitimate interests in the efficient and secure provision of this online service in accordance with Art. 6 Para. 1 lit. f GPDR in connection with Art. 28 GPDR (conclusion of an order processing contract).
We, and/or our hosting provider, raise on basis of our entitled interests in the sense of the art. 6 Abs. 1 lit. f. GPDR collects data on each access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.
The Jetpack Plugin (here the “WordPress Stats” sub-function), includes a statistical evaluation tool for visitor access and Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA. Jetpack uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site.
The processing of the personal data of the users takes place on the basis of our legitimate interests in effective information of the users and communication with the users in accordance with Art. 6 Para. 1 letter f. GPDR If the users are requested by the respective providers of the platforms to consent to the aforementioned data processing, the legal basis for the processing is Art. 6 Para. 1 lit. a., Art. 7 GPDR.
– Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Data policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
– Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) – Data policy: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
– Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) – Data policy/ Opt-Out: https://about.pinterest.com/de/privacy-policy.
As part of our online offer, we act on the basis of our legitimate interests (i.e. the interest in the analysis, optimisation and economic operation of our offer) of third party content or service offers in order to integrate their content and services, such as videos or fonts (hereinafter referred to uniformly as “content”).
Nous intégrons les cartes du service “Google Maps” du fournisseur Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Les données traitées peuvent inclure, en particulier, les adresses IP et les données de localisation des utilisateurs, qui ne sont pas collectées sans leur consentement (généralement dans le cadre des paramètres de leurs appareils mobiles). Les données peuvent être traitées aux États-Unis. Politique de confidentialité : https://www.google.com/policies/privacy/, Opt-Out : https://adssettings.google.com/authenticated.
Nous intégrons les cartes du service “OpenStreetMap” (https://www.openstreetmap.de), qui sont proposées sur la base de l’Open Data Commons Open Database License (ODbL) par la OpenStreetMap Foundation (OSMF). Politique de confidentialité : https://wiki.openstreetmap.org/wiki/Privacy_Policy.
As far as we know, OpenStreetMap uses user data exclusively for the purpose of displaying map functions and temporarily storing the selected settings. In particular, this data may include IP addresses and location data of users, which are not collected without their consent (usually within the framework of the settings of their mobile devices).
On the basis of our legitimate interests we make use of the information provided on this website, Social Plugins (“Plugins”) of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).
When a user calls a function of this online service that contains such a plugin, his device establishes a direct connection with the Facebook servers. The content of the plugin is transmitted directly from Facebook to the user’s device and integrated into the online service by the user. User profiles can be created from the processed data. We therefore have no influence on the extent of the data that Facebook collects with the help of this plugin and therefore inform the user according to our state of knowledge.
By integrating the plugins, Facebook receives the information that a user has called up the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. When users interact with the plugins, for example by clicking the Like button or commenting, the corresponding information is transferred directly from your device to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to find out his IP address and save it. According to Facebook, only an anonymous IP address is stored.
If a user is a Facebook member and does not want Facebook to collect data about him or her via this online service and link it with his or her member data stored on Facebook, he or she must log out of Facebook and delete his or her cookies before using our online service. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US page http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are adopted for all devices, such as desktop computers or mobile devices.
Les fonctions et le contenu du service Twitter offert par Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, peuvent être intégrés dans notre offre en ligne. Il peut s’agir, par exemple, de contenus tels que des images, des vidéos ou des textes et des boutons avec lesquels les utilisateurs peuvent partager du contenu de ce service en ligne sur Twitter.
Si les utilisateurs sont membres de la plateforme Twitter, Twitter peut assigner l’appel des contenus et fonctions mentionnés ci-dessus aux profils des utilisateurs. Twitter est certifié dans le cadre du Privacy Shield Agreement et offre ainsi une garantie de conformité avec la loi européenne sur la protection des données (https://www.privacyshield.gov/participant?id=a2zt000000000TORzAAO&status=Active). Politique de confidentialité : https://twitter.com/de/privacy, Opt-Out : https://twitter.com/personalization.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 9
 Art. 9
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 § 7
 Art. 6
 § 7
 Art. 6
 Art. 6
 Art. 28
 art. 6
 Art. 6
 Art. 6
 Art. 7