DATA PROTECTION

1. DATA PROTECTION AT A GLANCE

GENERAL NOTES

The following information provides a simple overview of what happens to your personal data when you visit the operator’s website. Personal data is all data with which you can be personally identified. For detailed information on the subject of data protection, please refer to the following information.

DATA COLLECTION ON THIS WEBSITE

Who is responsible for data collection on this website?

Data processing on this website is carried out by the operator of this website. You can find their contact details in the legal notice of this website.

How is your data recorded?

On the one hand, your data is collected when you provide it to the operator. This may, for example, be data that you enter in a contact form.

Other data is collected automatically by the operator’s IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter this website.

What is your data used for?

Some of the data is collected to ensure that the website is provided without errors. Other data can be used to analyze your usage behavior.

What rights do you have with regard to your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at datenschutz@euref.de if you have any further questions on the subject of data protection. You also have the right to lodge a complaint with the competent supervisory authority.

2. GENERAL NOTES AND MANDATORY INFORMATION

The operator of these pages takes the protection of your personal data very seriously. It treats your personal data confidentially and in accordance with the statutory data protection regulations and this data protection notice.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data the operator collects and what it is used for.

The operator points out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of your data against access by third parties is not possible.

NOTE ON THE RESPONSIBLE BODY

The controller responsible for data processing on this website is:

EUREF AG
EUREF-Campus 3
10829 Berlin
info@euref.de

DATA PROTECTION OFFICER

mip Consult GmbH
Jan Käding
Wilhelm-Kabus-Str. 9
10829 Berlin
E-Mail:  datenschutz@euref.de

REVOCATION OF YOUR CONSENT TO DATA PROCESSING

Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time with effect for the future. All you need to do is send an informal email to datenschutz@euref.de. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Information about your right to object in accordance with Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1) sentence 1(e) GDPR (data processing in the public interest) and Article 6(1) sentence 1(f) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

In individual cases, we process your personal data for the purpose of direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

The objection can be made informally and no costs other than the transmission costs according to the basic rates will be incurred.

If you wish to make use of your right to object, an informal notification, e.g. to the above-mentioned contact details, is sufficient.

RIGHT TO LODGE A COMPLAINT WITH THE COMPETENT SUPERVISORY AUTHORITY

In the event of breaches of data protection law, you as the data subject have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the State Data Protection Commissioner in Berlin.

3. DATA COLLECTION ON THIS WEBSITE

COOKIES and similar technologies

We use cookies and similar technologies (such as web storage; hereinafter referred to as “cookies”) on our website. Cookies contain information that usually consists of letters and numbers and are stored on the user’s computer when visiting certain websites.

Some of these cookies are necessary for our website to function, while other cookies help us to improve our website by providing us with insights into how you use the website.

By default, we only use technically necessary cookies. Technically necessary cookies enable the core functionalities of our website. The website cannot be displayed correctly without these cookies or individual areas may not function properly. Required cookies can only be prevented by making the appropriate settings in your browser.

We use cookies that are not required for the website to function (“non-essential cookies”) after obtaining your consent. You can withdraw your consent at any time.

We store information on your end device using cookies and similar technologies on the basis of Section 25 (2) No. 2 TDDDG. Data processing is carried out to safeguard our legitimate interest in the best possible functionality of the website in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

pll_language / 1 year / Saves the language setting of the website user / Permanent or protocol cookie

Google Maps (as widget in Contact & Directions)

SERVER LOG FILES

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to the operator. These are:

  • Requested URL
  • Time of the server request
  • anonymized IP address

We process your access data (see data listed above under point 2) to protect our legitimate interests or those of third parties. We pursue the following legitimate interests in particular:

  • Ensuring IT security, in particular the security of the website;
  • Advertising or market and opinion research, unless you have objected to the use of your data;
  • Assertion of legal claims and defense in legal disputes;

This data is not merged with other data sources.

The basis for data processing is Art. 6 para. 1 lit. f) GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

The data is automatically deleted after 6 months.

KONTAKTFORMULARE

If you send the operator inquiries via the contact form (including inquiries about the event location), your details from the inquiry form, including the contact details you provided there, will be stored by the operator for the purpose of processing the inquiry and in the event of follow-up questions. The operator will not pass on this data without your consent.

The data entered in the contact form is processed in accordance with Art. 6 Para. 1 b) GDPR.

The data you enter in the contact form will remain with the operator until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected by this.

Videos

We have embedded YouTube videos on our website that are stored on the platforms and can be played directly from our website.

The videos are integrated in such a way that your personal data is transferred when the videos are played. We have no influence on the data transfers that take place afterwards. In this context, the providers set cookies that are stored on your end device and save information in web storage.

YouTube

We as the operator of the YouTube channel and Google as the platform operator of YouTube are jointly responsible for the data processing of the personal data of subscribers, visitors and users that takes place on or via the channel.

Information on the handling of personal data by Google for the YouTube service can be found in Google’s privacy policy.

We operate this YouTube channel to present and communicate ourselves. The processing of users’ personal data is based on our legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR). The processing of your personal data after clicking on the embedded videos on our website is based on your consent (Art. 6 para. 1 sentence 1 lit. a) GDPR).

4. WEBSEITEN ANALYSE UND TRACKING

We use the web analysis service Matomo to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. We use Matomo without cookies or similar technologies and do not access the end device in any other way. It is therefore not necessary to obtain consent.

The data is processed on the basis of Art. 6 para. 1 sentence 1 lit. f) GDPR.

The information obtained about website usage is transmitted exclusively to the operator’s servers and summarized in pseudonymous usage profiles. The IP addresses are anonymized (IP masking) so that they cannot be assigned to individual users.

Matomo is hosted as a web analysis tool on the operator’s own servers. The data collected does not belong to any third-party providers and is not passed on to or viewed by third parties. The data will only be passed on with your express consent, insofar as this does not conflict with other legal or official requirements that oblige the operator to pass on the data.

5. NEWSLETTER

If you would like to receive the newsletter offered on the website, the operator requires an e-mail address from you as well as information that allows verification that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. The operator uses this data exclusively for sending the requested information and does not pass it on to third parties.

Registration for our newsletter takes place using the so-called double opt-in procedure. This means that after registering for the newsletter, we will send you an e-mail asking you to confirm your registration. This confirmation serves to ensure that only people who have access to the e-mail address provided register for our newsletter. We keep a record of newsletter registrations in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation as well as the IP address.

The data entered in the newsletter registration form is processed exclusively on the basis of your consent pursuant to Art. 6 para. 1 sentence 1 lit. a), Art. 7 GDPR in conjunction with § 7 para. 2 no. 3 UWG or on the basis of the legal permission pursuant to § 7 para. 3 UWG. You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time with effect for the future – via the “unsubscribe” link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
The data you provide to the operator for the purpose of subscribing to the newsletter will be stored by the operator until you unsubscribe from the newsletter and deleted after you unsubscribe from the newsletter. Data stored by the operator for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this.

6. Virtual Tour

By clicking on the link to the virtual 360° tour of some of our properties, you will be redirected to the website of the provider Nexpics. A new browser window will open. We do not process any further personal data and do not receive any from the provider. The provider’s privacy policy applies:

https://www.nexpics.com/datenschutz.html

7. VIDEO SURVEILLANCE ON THE EUREF-CAMPUS Berlin

The roads and paths of the EUREF-Campus are monitored by video for property security. The security company is contractually obliged to comply with the applicable data protection regulations. The purpose of video surveillance is to protect you and your investments on the EUREF-Campus and to prevent vandalism, burglary and theft.

All cameras are installed in such a way that they do not record the windows of your rental space or offices. The cameras at the property boundary only cover the immediate area of the boundary fences and walls and not the public urban area or the surrounding buildings.

The legal basis for video surveillance is our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR.

The recordings are automatically deleted after 48 hours. The footage is only passed on in the event of a recorded criminal offense. Recipients are exclusively the investigating law enforcement authorities.

8. SOCIAL MEDIA 

You can find us on social networks and platforms so that we can also communicate with you there and inform you about our services.

We would like to point out that your data may be processed outside the European Union and that the data is generally processed for market research and advertising purposes. Usage profiles can be created from the usage behavior and resulting interests of the users. These usage profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For this purpose, cookies may be stored on the users’ computers, in which the usage behavior and interests of the users are stored. Other data may also be stored in these user profiles, in particular if the users are members of the respective platforms and are logged in to them.

On our website, we only link to our company profiles on the respective social networks. Please note, however, that when you click on a link to the social networks, data is transferred to their servers. If you are logged in to the respective social network with your user name and password at this time, the information that you have visited our company profile on the respective social network from our website will be transmitted there and the respective provider can save this information in your user account.

In principle, we have no significant influence on the data processing of social networks. However, we receive statistics from the providers about the use of and visits to our company profiles in the social networks (e.g. information about the number of views, interactions such as likes and comments as well as summarized demographic and other information or statistics). Further information on the data used by the providers can be found in the providers’ data protection notices linked below.

If we receive your personal data as part of our social media presence (e.g. as part of a message), you are entitled to the rights set out above in this data protection information. You can address your inquiries regarding data processing in the context of our company profiles to us using the contact details above.

If you also wish to assert rights against the provider of the social network, the easiest way to do so is to contact the respective provider directly. The provider knows both the details of the technical operation of the platform and the associated data processing as well as the specific purposes of the data processing. The contact details can be found in the data protection information linked below. We are also happy to support you in asserting your rights, insofar as this is possible for us.

The processing of users’ personal data is generally based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. The legal basis is also Art. 6 para. 1 lit. b GDPR if we receive and process your data as part of a contract-related request via our social media presence. The legal basis for the linking and operation of our company profiles in social networks, including the receipt of statistics on the use of our company profiles, is Art. 6 para. 1 lit. f) GDPR based on our legitimate interest in our corporate communication in the respective social networks.

For information about the respective processing and the respective objection options, please refer to the data protection information of the providers linked below:

 

9. DATA PROTECTION INFORMATION FOR APPLICANTS

The operator hereby informs you as an applicant and thus as a data subject about the processing of your personal data by the companies of the EUREF Group and the rights to which you are entitled under data protection law. In addition, the operator’s general data protection information applies.

We process the following personal data as part of the application process:

  • Your master data (such as first name, surname, name affixes, date of birth)
  • Work permit / residence permit
  • Contact details (e.g. private address, (mobile) telephone number, e-mail address)
  • “Skills” data (e.g. special knowledge and skills)
  • If relevant for the advertised position: health suitability

Your personal data is generally collected from you as part of the recruitment process, in particular from the application documents, the job interview and, if applicable, from the agreement of an empathy relationship and the personnel questionnaire.

In addition, the operator receives data from third parties (e.g. from the employment agency as part of a job placement).

The operator processes your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

The primary purpose of data processing is to establish the employment relationship. The primary legal basis for this is Art. 6 para. 2 lit. a) GDPR.

Your data will be processed exclusively to fill the specific position for which you have applied.

If your application is to be considered for other vacancies in the company, the operator requires a separate declaration of consent from you.

If you would like to be included in the applicant pool in the event of rejection, the operator requires a separate declaration of consent from you.

In the event of a rejection, your application documents will be deleted no later than six months after completion of the application process, unless you have given us separate consent for longer storage (applicant pool).

If you are hired, we will transfer your data from the application process and the application documents to your personnel file. After termination of the employment relationship, we will continue to store the personal data that we are legally obliged to retain. This regularly results from legal obligations to provide evidence and retain data, which are regulated in the German Commercial Code and the German Fiscal Code, among others. The storage periods are up to ten years. In addition, personal data may be stored for the period during which claims can be asserted against us (statutory limitation period of three or up to thirty years).

Within the operator’s company, only those persons and departments that are involved in the decision to hire you (HR department, specialist department, management) will receive your personal data.

10. DATA TRANSFER TO THIRD COUNTRIES

Data is not transferred to third countries (countries outside the European Union – EU).

11. AUTOMATED INDIVIDUAL CASE DECISIONS OR MEASURES FOR PROFILIN

The operator does not use automated processing to reach a decision.

12. INDICATOR SYSTEM

Compliance with laws and internal regulations is a top priority for our company. With this in mind, we have added a whistleblower system to our compliance system. Employees, business partners and third parties have the opportunity to report suspected cases of non-compliant behavior at any time.

Appropriate information can be provided as part of our reporting procedure. The following personal data may be processed in order to receive information and clarify suspected cases of breaches of the rules: Details of the suspected person (e.g. surname, first name, position and employment details), details of the suspected breaches of conduct and details of the reporting person (e.g. surname, contact details). We ask the reporting persons to refrain from providing sensitive information about the suspected persons unless this is necessary for the description of the concern.

The recipients of your data and the report are the internal compliance officers and, if necessary, other organizational units (e.g. the data protection officer) who must be entrusted with clarifying the facts. Your personal data will not be passed on to recipients outside the EUREF Group. In certain cases, we may be obliged under Art. 14 para. 3 lit. a) GDPR to inform suspected persons about the allegations made against them and the investigations carried out against them within one month; this usually includes the following information: The fact of data storage, categories of data, purpose of processing as well as the identity of the responsible body and, if applicable, the whistleblower.

The establishment of our whistleblower system and the associated processing of personal data serves to fulfill legal obligations pursuant to Art. 6 para. 1 lit. c) GDPR in conjunction with Art. 6 para. 1 lit. f) GDPR. In addition, we base the processing of personal data on a legitimate interest in preventing and combating corruption in accordance with Art. 6 para. 1 lit. f) GDPR.

The aforementioned personal data will be stored for as long as it is required for the clarification of the respective facts or as long as it must be stored due to legal obligations.

In principle, you as the reporting person can object to the processing of your personal data after the report has been submitted. However, we would like to point out that we may be legally obliged to disclose your personal data from the report in accordance with Art. 14 para. 3 lit. a) GDPR. In this case, it may no longer be possible to stop processing your personal data despite your objection. In addition, the processing of the data may already be so far advanced after the time of the objection that deletion is no longer possible (if we, as the controller, have to comply with the clarification of the suspected case). The objection to the processing of your personal data may also be ineffective if the nature of the reference requires the direct involvement of an authority or a court. As soon as personal data has been disclosed to an authority or a court, it is included both in our documentation and in the procedural files of the respective authority or court.

13. Events

If you register for one of our events, we will process your personal data for registration and for other purposes such as accreditation and follow-up. We may process categories of data such as contact data (name, address, e-mail, telephone number, company) and, if necessary, special categories of data such as health data (e.g. food allergies for catering). We also process these categories of personal data for accompanying persons if you register them.

If you have consented to data processing (this applies in particular to voluntary information), we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, insofar as special categories of data are processed in accordance with Art. 9 para. 1 GDPR. You can withdraw your consent at any time with effect for the future. If your data is required to fulfill the contract or to carry out pre-contractual measures (in particular mandatory information), we process your data on the basis of Art. 6 para. 1 lit. b GDPR.

Furthermore, we process your data if this is necessary to fulfill a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR (e.g. personal verification at high-profile events). Data processing may also be carried out on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.

The personal data collected by us for the events will be stored by us for a period of 6 months after the end of the event, unless we are entitled or obliged to store it for a longer period on another legal basis.

If you have registered for an event, it may be necessary to transfer your personal data to third parties (e.g. service providers) as part of the fulfillment of the contract, in particular for participant administration. The transfer takes place on the basis of an order data processing contract with the third parties in accordance with Art. 28 GDPR.

14. Video recordings and photos

During events, we may make audio, photo and video recordings for the purpose of internal and external documentation. You have the option of contacting the photographer or cameraman at any time and stating that you object to your person being recorded. You can also inform us after the event that you object to your person being recorded (an informal email is sufficient).

The legal basis for the data processing associated with the production of the recordings is Art. 6 para. 1 lit. f GDPR, based on our interest in documenting the event and our public image.

We may use the recordings made for documentation and external presentation on our website and, if applicable, on our social media profiles (Facebook, X, Instagram, LinkedIn) and in offline publications. For this purpose, we first edit the images (e.g. by selecting the image crop) and post the edited images online without mentioning your name. We try as much as possible to use images in which you are merely an accessory.

The providers of the social media platforms may process and use data posted on the platforms for their own purposes. This data processing is beyond our direct control.

Änderung dieser Datenschutzhinweise

The operator will revise this data protection notice in the event of changes to this website or other occasions that make this necessary. The current version can always be found on this website.
If you have any questions about data protection, you are welcome to contact the operator.

Status 1.3.2025