Welcome to our website. Protecting your personal data is especially important to us. This privacy policy explains how we process your personal data on this website.
The term “personal data” (hereinafter also referred to as “data”) means any information relating to an identified or identifiable natural person (the so-called “data subject”). We process your data in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (“GDPR”) as well as all other applicable data protection laws. Unless otherwise stated in this privacy policy, the terminology used here corresponds to the definitions provided in Article 4 of the GDPR.
The following information on data protection explains in particular which types of personal data are processed for which purposes, what happens to this data, and how you can object to data processing where applicable.
The controller within the meaning of the GDPR is:
KAURI CAB Quartier GmbH
Address: Uhlandstraße 175
D-10719 Berlin
Phone: +49 (0)30 804984950
Email: info@kauricab.com
The Data Protection Officer is Kemal Webersohn from WS Datenschutz GmbH.
If you have any questions regarding data protection, you can contact the Data Protection Officer at the following email address: kauricab@ws-datenschutz.de
WS Datenschutz GmbH
Dircksenstraße 51
D-10178 Berlin
https://webersohnundscholtz.de
We have implemented technical and organizational measures to ensure that the provisions of the GDPR are observed both by us and by any external service providers working on our behalf.
When we cooperate with other companies to provide our services – such as email or server providers – this is done only after a thorough selection process. Each service provider is carefully evaluated for their suitability regarding technical and organizational capabilities in data protection. This selection process is documented in writing, and a contract for data processing on behalf of a controller (Data Processing Agreement) in accordance with Article 28(3) GDPR is concluded whenever the service provider processes personal data on our behalf.
Your information is stored on specially protected servers, and access to it is restricted to a limited number of authorized individuals.
We process personal data only for as long as necessary to achieve the purposes set out in this privacy policy. Once the respective purpose of data processing has been fulfilled, the data will be blocked and deleted unless legal regulations require otherwise. Such legal requirements may arise in particular from commercial or tax law retention and documentation obligations, which in certain cases may require your data to be stored for up to ten years.
Your personal data will only be disclosed to third parties in accordance with this privacy policy. To provide our services, we use external service providers whom we carefully select based on the criteria described in Section 1.3 of this privacy policy.
When you use our website, we collect data that your browser automatically transmits to our server (so-called “server log files”). When you access our website, we collect the following data:
• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which the access originated (referrer URL)
• Browser used and, if applicable, the operating system of your computer as well as the name of your access provider
Processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in displaying and providing the website to you, as well as in ensuring and improving the stability and functionality of our website.
The data is not passed on or used in any other way. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.
Our website uses the online mapping tool “Mapbox” provided by Mapbox, Inc. (Address: 740 15th St NW Suite 500, Washington, DC 20005, USA) to visually display geographical information. The processing of your personal data is based on your consent in accordance with Article 6(1)(a) GDPR, which you may withdraw at any time. If you do not provide your consent to data processing by agreeing to this privacy policy, the Mapbox feature on our website will not be available to you, and no data will be collected or stored by Mapbox.
With your consent, information about your use of our website, including your IP address, will be transmitted to Mapbox servers in the United States and stored there. We have no control over the data transmission or processing carried out by Mapbox. Mapbox may share your data with third parties when required by law or when such data is processed on Mapbox’s behalf. However, Mapbox is certified under the EU–US Data Privacy Framework and is committed to upholding EU data protection standards when processing data in the United States.
For more information on how Mapbox processes your data, please refer to their privacy policy: https://www.mapbox.com/legal/privacy.
When you contact us (e.g., by email or telephone), the personal data you provide will be used for the purpose of processing your inquiry. Your personal data will be used exclusively for the purpose you specify when contacting us. Providing this information is voluntary.
Data processing is based, unless one of the following legal grounds applies, on our legitimate interest under Article 6(1)(f) GDPR to respond to your message. If your contact is made for the purpose of concluding or performing a contract, processing is lawful under Article 6(1)(b) GDPR. If you provide additional, non-required personal data in this context, the processing of that data is based on your consent in accordance with Article 6(1)(a) GDPR.
You have the following rights regarding your personal data processed by us:
If you have given consent for the processing of your data, you may withdraw it at any time. Such withdrawal affects the lawfulness of the processing of your personal data going forward, after you have communicated it to us. You can submit your withdrawal verbally (including by phone) or in writing by post or email.
In the case of a request for access, you must provide sufficient information to verify your identity, and if your identity cannot be confirmed based on the information you have provided, you may be required to supply additional proof showing that the information requested relates to you. The access request covers the following information:
• the purposes for which the personal data is processed;
• the categories of personal data that are being processed;
• the recipients or categories of recipients to whom your personal data has been or will be disclosed;
• the intended duration of storage of your personal data, or, if specific details are not possible, the criteria used to determine the storage period;
• the existence of a right to rectification or erasure of your personal data, a right to restriction of processing by the controller, or a right to object to such processing;
• the existence of a right to lodge a complaint with a supervisory authority;
• all available information on the source of the data, if the personal data was not collected from the data subject;
• the existence of automated decision-making, including profiling, as referred to in Article 22(1) and (4) GDPR, and—at least in those cases—meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject;
• the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer of personal data to a third country.
You have the right to request rectification and/or completion of your data from us as the controller if the personal data we process about you is inaccurate or incomplete. The controller must make the correction without undue delay.
You also have the right to request the erasure of your personal data if one of the following reasons applies to you:
• Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
• You withdraw your consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal basis for the processing.
• You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
• Your personal data has been unlawfully processed.
• The erasure of your personal data is required to comply with a legal obligation under Union or Member State law to which the controller is subject.
• Your personal data was collected in connection with the offer of information society services pursuant to Article 8(1) GDPR.
If we have made your personal data public and are obliged to erase it pursuant to Article 17(1) GDPR, we will take all reasonable measures to inform other controllers processing the data that you have requested the deletion of all links to, or copies or replications of, such personal data.
The right to erasure does not apply insofar as processing is necessary:
• for exercising the right of freedom of expression and information;
• for compliance with a legal obligation that requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) GDPR;
• for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89(1) GDPR, insofar as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of such processing; or
• for the establishment, exercise, or defense of legal claims.
You may request the restriction of the processing of your personal data under the following circumstances:
• if you contest the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data;
• if the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of its use;
• if we no longer need the personal data for the purposes of processing, but you require it for the establishment, exercise, or defense of legal claims; or
• if you have objected to processing pursuant to Article 21(1) GDPR and it has not yet been determined whether our legitimate grounds override your reasons.
Where processing of your personal data has been restricted, such data – apart from its storage – may only be processed with your consent, or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State.
If the restriction of processing has been imposed under the above conditions, you will be informed by us before the restriction is lifted.
If you have exercised your right to rectification, erasure, or restriction of processing with respect to us, we are obliged to notify all recipients to whom your personal data has been disclosed of such rectification, erasure, or restriction of processing. This obligation applies unless such notification proves impossible or would involve a disproportionate effort.
You also have the right to be informed about those recipients who have received your data.
You have the right to receive your personal data from us in a structured, commonly used, and machine-readable format, and you also have the right to transmit this data to another controller, provided that:
• the processing is based on your consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or on a contract pursuant to Article 6(1)(b) GDPR, and
• the processing is carried out by automated means.
In exercising your right to data portability, you have the right to have your personal data transmitted directly from us to another controller, where technically feasible.
This right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
If we process your personal data on the basis of our legitimate interests (pursuant to Article 6(1)(f) GDPR), you have the right to object to such processing. The same applies if we base the processing on Article 6(1)(e) GDPR.
When exercising your right to object, please explain the reasons why you believe we should not process your personal data as we have been doing. In the event of a justified objection, we will review the situation and either stop or adjust the data processing, or demonstrate to you the compelling legitimate grounds on which we continue the processing.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work, or the place of the alleged infringement, if you believe that the processing of your personal data violates the GDPR.
The supervisory authority with which the complaint has been lodged will inform you of the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.
To exercise these rights, please contact us using the contact details provided above.
We reserve the right to amend this privacy policy in compliance with applicable legal requirements.
We do not rely on automated decision-making (such as profiling in accordance with Article 22 GDPR) in the processing of your personal data.