Data Protection Declaration

  1. General Comment

This data protection declaration is aimed at the users of the services offered by ParkU (both those who rent parking spaces and those who let them) and to the visitors to the internet offers made by ParkU in general. ParkU places its offers at your disposal through a number of access channels (e.g. website and smartphone app) (all of which are hereinafter jointly referred to as “Platform”). At this point we wish to inform you regarding the use of your personal data as well as of cookies and analysis tools on our Platform. Personal data are all data that may be traced back to you as a person, e.g. name, address, e-mail addresses, IP addresses, cookies. This data protection declaration will be applied to all present and future access channels to the Platform. In the following you will be informed as to the various processing procedures. We thereby also specify the defined criteria for the duration of the archiving

  1. Responsible Entity and Provider of Services

The responsible entity according to Art. 4 Para. 7 EU General Data Protection Regulation (GDPR) is ParkU – Verwaltung GmbH & Co. KG, Strelitzer Straße 60, D-10115 Berlin, Germany (cf. our legal notice) service@parku.com

You may contact our Data Protection Officer at Datenschutz@parku.de or via our postal address, thereby adding the suffix “The Data Protection Officer”.

  1. Order Processor

We have recourse to service providers for individual functions within our offer. We will also be informing you of this in the following.

  1. Your Rights

You have the following rights towards us regarding those personal data affecting yourself:

–Right to information

–Right to correction or deletion,

–Right to restriction of the processing,

–Right to object to the processing,

–Right to data portability.

You furthermore have the right to register a complaint with a data protection supervisory authority concerning the processing of your personal data by us.

 

 

  1. Collection, Processing and Usage of your Personal Data

The extent and nature of the collection, processing and usage of your personal data differs depending on whether you merely visit our Platform and use it in order to inform yourself or whether you also correspond with us via our Platform or actively use it as a letting and/or renting user.

  1. a) Purely Informative Usage

In order to use our Platform for purely informative purposes it is as a fundamental rule not necessary for you to provide any personal data. It is rather so that, in this case, we collect and use only those data of yours that your internet browser automatically sends to us (in particular your IP-Address); in detail, these are the following:

–IP address (for a period of 30 days)

–Date and time of the request

–Time zone difference to Greenwich Mean Time (GMT)

–Content of the request (specific site)

–Access status/http status code

–The volume of data transmitted in each case

–Website from which the request originates

–Browser

–Language and version of the browser software.

 

This information will -in a non-anonymised form – merely be archived for the duration of your visit to the Platform and an analysis shall be undertaken subsequently in anonymised form purely for statistical purposes. In this connection, therefore, no permanent processing of any personal data of yours shall take place.

The legal basis for this is Art. 6 Abs. 1 f) GDPR (legitimate interest). The processing serves the technically impeccable presentation of our offers and the guaranteeing of the stability and security of said offers plus the combating of any possible hacker attacks and is necessary for these purposes.

  1. b) Active Usage of the Platform / Registration

(i) Master Data

Inasmuch as you should use the Platform actively and register yourself as a user we shall be storing and processing those data provided by you in the context of the registration (in particular name, first name, email address, address and other optional data) in order enable you to let or rent parking spaces via the Platform. Compulsory files are thereby identified accordingly. We have listed further details pertaining hereto under c) to e) below.

(ii) Registration Channels

In addition to separate registration via a form you also have the possibility of registering yourself via an existing Facebook account for our Platform or of logging yourself onto our Platform. In the course of this procedure – subsequent to a further confirmation from you – various pieces of information from your Facebook account will be transmitted to us which we shall then use and process in order to perform the services on our Platform. Further information on this may be found under https://www.facebook.com/about/privacy/.

(iii) Location Determination

In addition, a location will be approximately determined with the aid of your IP address by way of which our service shall be able to supply you with offers close at hand (namely search for a parking space in the user’s specific vicinity). The locations will not be evaluated for any other purposes. This is part of the contractual fulfilment. The legal basis for it is Art. 6 Abs. 1b) GDPR.

 

  1. c) In detail, the following data shall be processed/collected via the registration and/or subsequently:
  • Simple/Pure Registration:

Collection and processing of registration data, namely:

Compulsory Fields:

Country, first name, last name, e-mail, whereabouts of the User, password,

  • Optional Fields as part of the Service

Gender (optional),

Age group (optional),

Telephone number (optional),

Mobile telephone number (optional),

Company name (optional),

Company identification number (optional),

Postal address (optional),

Invoice address (optional),

Vehicle type (optional),

Number plate (optional)

 

  • Further Processing

Whereabouts of user (automatically)

IP Address will be temporarily saved via Graylogs,

Device ID

 

  • Registration via Facebook

 

First name

Last name

E-mail address

Country

 

  • The legal basis for this is Art. 6 Para. 1 b) GDPR (Contractual Fulfilment). This data will be used in order to provide you – on the basis of the information provided – with the most suitable offer possible.

Users who have not carried out any transactions for more than four years will be deleted. Statutory archiving periods shall remain unaffected.

Certain data are necessary for the usage of the services. Inasmuch as you should not provide these, it is possible that services may not be rendered either in their entirety or in part.

  1. d) Letting Users

When using the Platform as a letting user various other data provided by you will additionally be published on the Platform in order that renting users might have the possibility of accessing parking spaces registered by you and of concluding a relevant contract of rent with you via the Platform. These are in particular:

Your name,

User name,

Location of the parking space,

Other details provided by you.

You will furthermore receive as a letting user, when appropriate, data of renting users in the context of the contracts of rent you have concluded via the Platform. You may use these solely for the purpose of processing the respective contract of rent and must subsequently delete them again immediately.

The legal basis for this is Art. 6 Abs. 1 b) GDPR (Contractual Fulfilment).

  1. e) Renting Users

We shall only supply data of renting users to other users or cooperation partners inasmuch as this should be necessary in the context of renting parking spaces / active use of the Platform.

These are:

In the event of a so-called “on-street booking” (parking on the street)

  • Name, address
  • Vehicle type
  • Mobile telephone number
  • Number plate
  • IP address (temporarily for archiving over a period of, at most, 30 days),

which will be sent to our cooperation partner Trafficpass Holding GmbH, Markgraf Rüdiger Str. 23/24, A-1150 Vienna, which implements the so-called “on-street bookings” (“Trafficpass”). Trafficpass is itself a responsible entity within the meaning of the General Data Protection Regulation. Data are to be deleted by Trafficpass immediately after the parking procedure has been completed or may only be used for as long as this is legally permissible (in particular for settlement purposes).

 

  • Payment data

Payment data will be collected directly from the provider of payment services chosen in the particular case. Payment data will not be processed in the systems of ParkU and neither will they be archived therein.

 

In the case of a so-called “off-street booking” (parking on designated parking spaces)

  • Name, address
  • Vehicle type
  • Mobile telephone number
  • Number plate,

 

which are forwarded to the respective parking space provider/letting user. Data are to be deleted by the latter immediately after the parking procedure has been completed or may only be used for as long as is legally permissible (in particular for settlement purposes). In the case of parking space providers they may also be cooperation partners of ParkU who operate systems of their own. The renting users shall always be notified prior to the conclusion of a contract as to the person to whom their data have been supplied as to who is/will be their contractual partner.

  • Payment data,

which will be transmitted directly to the respectively selected provider of payment services. Payment data will not be processed in the systems of ParkU.

The legal basis for all aforementioned examples of the forwarding/processing of data is Art.6 Para. 1 b) GDPR (Contractual Fulfilment).

  1. External Providers of Services

It may be necessary when processing your concern to forward your personal data to external providers of services who act exclusively on our behalf. We ensure that the external providers process your personal data only in a manner compliant with our instructions and in line with this data protection declaration and with the statutory regulations on order data processing. Your personal data will constantly be treated by us as confidential and not forwarded to any other third parties who do not act on our behalf unless you have agreed thereto or we are legally entitled or obliged to do so.

 

Service providers in the context of our relationships with our customers are, in particular:

  • TREND Service GmbH (Customer support): In der Fleute 100, D-42389 Wuppertal, telephone +49-(0)202-2515-300, fax: +49-(0)202-2515-305, e-mail: info@trend-service.de
  • Smacc GmbH (external accounting): Albert-Einstein-Ring 11

D-14532 Kleinmachnow, telephone: +49 (0)30 138824-900, e-mail:
contact@smacc.io

 

  • Graylogs (Server Logs)
    4141 Southwest Freeway, Houston, TX 77027, USA

 

  • Mailchimp (e-mail dispatch)
    675 Ponce De Leon Ave NE Suite 5000, Atlanta, GA 30308, USA

 

  1. Payment Services Providers (Payment systems)

We additionally avail ourselves of the services of various payment services providers in order to realise the payment processes. These are, in particular:

 

185 Berry Street Suite 550, San Francisco, CA 94107

 

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal (www.paypal.de)
L-2449 Luxembourg

 

  • Wirecard (wirecard.com)
    Einsteinring 35
    D-85609 Aschheim
  • Braintree (braintreepayments.com) operated by PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal

 

Gustav Mahlerplein 33-35, 1082 MS Amsterdam

With regard to the processing of personal data by the payment services providers the latter’s data protection declarations shall be applied.

Payment data will always be stored, used for transactions and processed on servers of the respective payment services providers.

  1. Usage of Cookies for diverse Purposes/ in particular Analysis

So-called cookies are used on our websites. Cookies are text files that are stored on your computer.

We use cookies on the one hand in order to be better able to understand how our website is used and in order to improve its attractiveness, content and functionality. Cookies help us, fir example, to establish whether and which sub-sites of our website are visited and the contents in which our users are interested and to evaluate this knowledge for statistical purposes.

It is to be differentiated thereby in particular between

– temporary cookies (cf. a)

and

– persistent cookies (cf. b).

  1. a) Temporary cookies are deleted automatically, e.g. when you close your browser. Among these are, in particular the session cookies. These store a so-called Session ID which enables the assignment of various inquiries from your browser to the common session. Your computer may thus be recognised once again when you return to our website. The session cookies are deleted when you log out or close your browser.
  2. b) Persistent cookies will be automatically deleted after a predetermined length of time that may differ depending on the cookie. You may delete the cookies at any time in the security settings of your browsers. You may also see the lifetime of a cookie in the security and in data protection areas of the browser.

The cookies set by us have a lifetime of one year at most.

If you so wish you may deactivate the use of cookies at any time through the settings of your internet browser. Please use the assistant functions of your internet browser in order to learn how you may change these settings.

The legal basis for all the types of processing listed below under Figures 9 to 16 is Art. 6 1f) GDPR. These types of processing are necessary in order to analyse the usage made of our offers and to optimise such offers.

  1. Google Analytics

Our Platform uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called cookies, text files that are stored on your computer and enable an analysis of your usage of the Platform.

The information generated by the cookie concerning your usage of this website will, as a general rule, be transmitted to a server of Google in the USA and stored there. As we have activated the IP anonymisation on this website your IP address will, however, be abbreviated by Google beforehand in member states of the European Union or other states that are parties to the treaty on the European Economic Area. Only in exceptional cases may it be necessary for the full IP address to be transmitted to a server of Google in the USA and be abbreviated there.

On our behalf Google will use this information in order to evaluate your use of the website, compile reports on the website activities and to perform other services for us connected with the usage of the website and the internet. The IP address transmitted from your browser in the context of Google Analytics will not be merged with any other data of Google.

You may prevent the storage of the Cookies by setting your browser software accordingly; we do, however, draw your attention to the fact that you may not, in this case, be able to use all functions of this website to their full extents.

You may also prevent the registration of the data generated by the Cookie and relating to your usage of the website (incl. your IP address with Google) and the processing of those data by Google by downloading and installing the browser plug-in available under the following link (retrievable in a number of languages): http://tools.google.com/dlpage/gaoptout?hl=de or click on this Link.

  1. Google Adwords

We use “Google Adwords” on the website of our Platform. This is an online advertising programme of Google Inc. that is operated in the USA. One part of Google Adwords is the so-called “Conversion Tracking” that is also deployed by us and in the context of which cookies are used. If a user should click on an advertisement placed by Google a conversion tracking cookie with a valid lifetime of 30 days is placed in the browser of that user. You may not be personally identified as a user by way of this. This cookie enables us and Google to recognise that a user has clicked a certain advertisement and thus been guided to our website. The cookie may thereby only be assigned by Google and ourselves, but not by other Google Adwords customers, as every Google Adwords customer receives his/her own cookie. We receive from Google via this conversion tracking statistical analyses pertaining to visitors that have been guided to us via Google advertising media. Inasmuch as you should not wish to be registered by conversion tracking you may prevent this by either blocking cookies in general or only cookies from the Domain “googleadservices.com”.

Further information on this can be found under www.google.com/intl/de/policies/privacy/.

  1. Facebook Insights

Conversion Measurement via Facebook Insights

In our app relating to our Platform (but not on our website) we use the analysis tool “Facebook Insights” of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). With the aid of this we may trace the actions of our users once they have viewed or clicked a Facebook advertisement. We are thus able to register the effectiveness of the Facebook advertisement for statistical and market research purposes. The data registered in this manner are anonymous for us, which means that we do not see the personal data of individual users. These data are, however, stored and processed by Facebook about which we shall inform you according to our state of knowledge and possibilities. Facebook may combine these data with your Facebook account and also use them for its own advertising purposes in accordance with Facebook’s data processing directive https://www.facebook.com/about/privacy/. You may enable Facebook and its partners to place advertisements both on and outside Facebook. For these purposes a cookie may also be stored on your computer. You may object to such usage at any time. more information may be found under: https://www.facebook.com/help/568137493302217

  1. NewRelic

We use the tool “NewRelic” on our servers in order to monitor the performance of the Platform. No personal data are processed when doing so.

  1. Adjust

Adjust is operated by adjust GmbH, Saarbrücker Str. 37A D-10405 Berlin. This service helps us to trace whether users have clicked on a ParkU advertising medium and entered an app-store via said medium. It also measures whether the user has subsequently downloaded and opened an app version and whether he has registered for our services. Adjust thereby measures the conduct of an anonymous user. You have the possibility of objecting to this measuring at https://www.adjust.com/opt-out/. (https://www.adjust.com/imprint/).

  1. Graylogs

Graylogs is used as a tool which registers the server requests and server responses in order to discover any errors in the server communication. The information stored will be deleted after 30 days.

  1. Salesforce

In the Customer Relations field we use products of the company Salesforce.com Germany GmbH, Erika-Mann-Str. 63, D-80636 Munich, Germany (“Salesforce”) – in particular for our customer service. Salesforce thereby collects on our behalf data from customer inquiries, processes them and, if need be, forwards them to us. Information on data processing by Salesforce can be found in the data protection declaration of Salesforce under http://www.salesforce.com/de/company/privacy.jsp as well as http://www.salesforce.com/de/company/updated_privacy.jsp.

  1. Mailchimp / Newsletter

For the dispatching of booking confirmations, invoices and monthly settlements we use the e-mail dispatch service Mailchimp. Inasmuch as you have given your consent to receiving an e-mail newsletter we will send you by this means information about our products. You may object to this at any time.

The legal basis for this is Art. 6 Para. 1b) GDPR (Consent).

 

  1. Establishment of Contact with us (e.g. via e-mail or contact form)

Use and forwarding of personal data when contact is established

Inasmuch as you have provided us with personal data (e.g. via a contact form), we shall use these only in order to process contracts concluded with you and for technical administration. We will not forward the personal data sent to us to any third parties unless forwarding or disclosure should be necessary in the context of implementation or the data should be needed at superordinated instances due to legal obligations.

The same applies to any inquiries from any third parties that reach us in a commercial context (potential contractual partners or other third parties).

We further use data for internal purposes in order to approach and support customers. The legal basis for this is Art. 6 1f) (“legitimate interests”). We have a legitimate interest in nurturing and analysing our relationships with our customers. This accords with our business interests. Your rights as a user are upheld as you are either engaged with us in a contractual relationship or are contacting us for business reasons. Your data will be deleted as soon as they are no longer necessary for the achievement of the purpose. Inquiries from private persons will, as a general rule, be deleted immediately after answering. You may object to the processing at any time with effect for the future.

Legal restrictions upon the processing of data in promotional e-mails remain unaffected and are heeded by us.

  1. Security of your Data

The data transmitted by you will be protected by us by way of appropriate technical and organisational measures in order in particular to protect them against chance or deliberate manipulation, loss, destruction or access by unauthorised persons.

  1. Updating this Data Protection Declaration

We will be updating this data protection declaration from time to time as need be.

 

 

Berlin, den 25.05.2018