Privacy Policy

Section I – Controller and overview of data processing

Controller:

be Around GmbH Potsdamer Platz 11 10785 Berlin Germany

Managing Directors: Moritz Kothe (CEO), Mathias Klement (CPO), Steffen Heilmann (CRO)

Email: info@aroundhome.de

Tel.: 0800-29 29 29 4 Full legal notice: https://www.aroundhome.de/impressum/

The controller is hereinafter also referred to as “we” or “us”.

Contact details of the Data Protection Officer:

datenschutz@aroundhome.de

Description of our core services:

be Around offers comparison services on the Internet. Interested parties can make comparison queries for specific products and services. The comparison queries are then forwarded to companies, intermediaries or other providers of these products or services (jointly referred to as “providers”), which in turn can make offers to interested parties.

Agreement: By submitting the comparison query (by clicking on the “compare offers” button), the interested parties agree to us processing their name, contact and request data in order to process their query, prepare the offer and pass the information on to selected providers.

Withdrawal option:

Consent can be withdrawn informally at any time with future effect, e.g. by email to datenschutz@aroundhome.de or by letter to be Around GmbH, Potsdamer Platz 11, 10785 Berlin, Germany.

Types of processed data:

• Inventory data (e.g. names, addresses).
• Contact details (e.g. email addresses, telephone numbers).
• Content data (e.g. details of comparison queries).
• Contract data (e.g. content of comparison queries, mediated providers).
• Usage data (e.g. websites visited, interest in content, access times).
• Meta/communication data (e.g. device information, IP addresses).
• Applicant data (e.g. name, contact details, qualifications, application documents).

Processing of special data categories (Article 9 (1) GDPR):

In principle, no special categories of data are processed, except health data, if provided by users for processing, e.g. with information on desired comparative offers (for example, information on mobility aids).

Categories of data subjects:

• Interested parties.
• Providers, business partners.
• Visitors and users of the online offer.
• Applicants.

In the following, we refer to the data subjects as “users”.

Purpose of processing:

• Provision and execution of comparison and mediation services.
• Provision of the online offer, its content and features.
• Provision of contractual performances, service and customer care.
• Answering contact requests and communicating with users.
• Marketing, advertising and market research.
• Security measures.

Automated decision on a case-by-case basis (Article 22 GDPR):

We do not make automated decisions on a case-by-case basis.

Version of Privacy Policy: April 2021/p>

---

Section II – Rights of data subjects, legal bases and general advice

Rights of data subjects

You have the right to ask for confirmation as to whether the data in question is being processed and for information about this data as well as for further information and a copy of the data in accordance with Article 15 GDPR.

In accordance with Article 16 GDPR, you have the right to demand the completion of the data relating to you or the correction of the incorrect data relating to you.

In accordance with Article 17 GDPR, you have the right to demand that the relevant data be deleted immediately or, alternatively, to demand that the processing of data be restricted in accordance with Article 18 GDPR.

You have the right to demand that the data relating to you, which you have provided to us, be obtained in accordance with Article 20 GDPR and request that it be transmitted to other controllers.

In accordance with Article 77 GDPR, you have the right to file a complaint with the competent supervisory authority.

Right to withdraw

You have the right to withdraw consent in accordance with Article 7 (3) GDPR with effect for the future.

Right to object

You can object to the processing of your data at any time in the future in accordance with Article 21 GDPR. In particular, you may object to processing for direct marketing purposes.

Cookies and right to object in direct marketing

We use temporary and permanent cookies, i.e. small files that are stored on users' devices (for an explanation of the term and its function, see last section of this Privacy Policy). In part, the cookies are used for security or to operate our online offer (for example, for the presentation of the website) or to save the user's decision regarding the cookie consent banner. In addition, we or our technology partners use cookies for audience measurement and marketing purposes, which users are informed about in the Privacy Policy.

If users do not wish to have cookies stored on their computer, they will be asked to disable the option in their browser's system settings. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.

The US site http://www.aboutads.info/choices/ and the EU site http://www.youronlinechoices.com/ explain general objections to the use of cookies for online marketing purposes for a variety of services, especially in the case of tracking. Furthermore, cookies can be stored by switching them off in the browser settings. Please note that this may not allow all features of this online offer to be used.

Exclusively automated data processing

In accordance with Article 22 GDPR, you have the right not to be subject to a decision based solely on automated processing – including profiling – which will have legal or similar effect on you.

We would like to inform you that we do not carry out exclusively automated data processing.

Deletion of data and archiving obligations

The data processed by us is deleted or limited in its processing in accordance with Articles 17 and 18 GDPR. Unless explicitly stated in this Privacy Policy, the data stored by us is deleted as soon as it is no longer required for its purpose and the deletion does not conflict with any statutory storage requirements. If the data is not deleted because it is required for other and legitimate purposes, its processing will be restricted, i.e. the data will be blocked and not processed for other purposes. For example, this applies to data that must be kept for commercial or tax reasons.

According to legal requirements, storage is for 6 years in accordance with Section 257 (1) HGB - German Commercial Code (trading books, inventories, opening balance sheets, annual accounts, trade letters, accounting documents, etc.) and for 10 years in accordance with Section 147 (1) AO - German Fiscal Code (books, records, management reports, accounting documents, commercial and business letters, tax documents, etc.)

Changes and updates to the Privacy Policy

We ask you to keep yourself informed about the content of our Privacy Policy. We will adjust the Privacy Policy as soon as any changes we make to the data processing require us to do so. We will notify you as soon as the changes require your participation (e.g. consent) or other individual notification.

Relevant legal bases

We inform you about the legal bases of our data processing in accordance with Article 13 GDPR. Unless the legal basis is mentioned in the Privacy Policy, the following shall apply: The legal basis for obtaining consent is Article 6 (1) (a) and Article 7 GDPR, the legal basis for processing in order to perform our services and execute contractual measures as well as respond to enquiries is Article 6 (1) (b) GDPR, the legal basis for processing in order to fulfil our legal obligations is Article 6 (1) (c) GDPR, and the legal basis for processing in order to safeguard our legitimate interests is Article 6 (1) (f) GDPR. In the event that vital interests of the data subject or any other natural person require the processing of personal data, Article 6 (1) (d) GDPR shall serve as the legal basis.

The basics for commercial communications outside of business relationships, in particular via post, telephone, fax and email are included in Section 7 UWG (German Act Against Unfair Competition).

Data processing security

We take appropriate technical measures in accordance with Article 32 GDPR, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different likelihood and severity of the risk to the rights and freedoms of natural persons and organisational measures to ensure a level of protection appropriate to the risk. Measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as their access, input, disclosure, availability and separation. We have also set up procedures to guarantee the rights of data subjects, the deletion of data and a response to data vulnerability. Furthermore, we take into account the protection of personal data in the development stage, and/or the choice of hardware, software and procedures, according to the principle of data protection through technology design and privacy-friendly default settings (Article 25 GDPR).

One security measure is the encrypted transfer of data between your browser and our server.

Employees are obligated and instructed to observe confidentiality with regard to data protection. They are also advised about possible liability claims.

Disclosure and transfer of data

If, as part of the processing, we disclose data to other individuals and companies (contract processors or third parties), transmit the data to them or otherwise grant access to the data, this will only be done with legal permission (e.g. if transmission of the data to third parties is required by payment service providers, pursuant to Article 6 (1) (b) GDPR to fulfil a contract), or if you have consented, there is a legal obligation to do so or it is based on our legitimate interests (e.g. the use of agents, web hosts, etc.).

If we commission third parties to process data on the basis of a so-called “order processing contract”, this is done on the basis of Article 28 GDPR.

If we disclose, transmit or otherwise grant access to data to other companies in our group of companies, this is done in particular for administrative purposes as a legitimate interest and on the basis of an order processing contract.

Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of third-party services or disclosure or transmission of data to third parties, this will only be done if it is to fulfil our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Article 44 et seq. GDPR. i.e., the processing is based on specific guarantees, such as the officially recognised level of data protection for the EU (e.g. for the US through the Privacy Shield) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).

Section III – Processing operations

The following presentation gives you an overview of our processing activities, which we have subdivided into other areas of activity. Please note that the areas of activity are for guidance only and that the processing activities may overlap (e.g. the same data may be processed in multiple procedures).

For the sake of clarity and comprehensibility, please see Section IV of this Privacy Policy for frequently repeated terminology.

Core area of data processing

In this section you will receive information about our core services and tasks, such as answering enquiries and providing our contractual services as well as the related ancillary tasks.

Comparison and mediation services

We process the information provided by the interested parties in the context of the comparison query for the purpose of justification, implementation and, if necessary, termination of a contract for the mediation of up to three offers from providers of the products or services you request. The offer mediation is free of charge and without obligation.

We use the contact details of the interested parties to specify their request by telephone and to propose suitable providers based on the specified request. In addition, we ask interested parties at a later date whether they have already received three offers from the selected providers.

By submitting the comparison query (by clicking on the “compare offers” button), the interested parties agree to us processing their name, contact and request data in order to process their query, prepare the offer and pass the information on to selected providers. The consent can be withdrawn informally at any time with future effect, e.g. by email to datenschutz@aroundhome.de or by letter to be Around GmbH, Potsdamer Platz 11, 10785 Berlin, Germany.

We record the entries in the comparison form in order to be able to prove the existence of the contractual relationship and the consent of the interested parties in accordance with the statutory accountability obligations (Article 5 (2) GDPR).

• Processed data: inventory data, communication data, contract data, content data, usage/metadata; the logging procedure stores the time at which the comparison query was made, the time at which the confirmation link was pressed and the IP address.
• Special categories of personal data: Health data, if necessary for mediation.
• Data subjects: Interested parties, online users and/or website visitors.
• Purpose of processing: Provision of contractual services, customer service, logging.
• Processing basis: Article 6 (1) (b) (contract for the mediation of comparison queries) and (c) (legally required logging / archiving) GDPR.
• Necessity / interest in processing: The data is necessary for the establishment and fulfilment of the contractual services as well as for the fulfilment of the legal obligation to provide supporting documents.
• External disclosure and purpose: Providers, for the purpose of submitting offers to the interested parties as part of the comparison.
• Processing in third countries: No.
• Deletion of data: The deletion takes place no later than six months after the end of the contract, if there is no need for the data to be stored, whereby the inventory data as well as proofs of the contractual relationships / agreements are stored for up to two years; there may be a need, for example, when queries are open; the need to keep the data is reviewed every year; in the case of legal archiving obligations, the deletion takes place after its expiration (end of commercial / tax retention obligations, i.e. 10 years after at the latest); the storage of the respective data sets is evaluated every two years.

Answering enquiries

The information we receive from the enquiries made through our contact form and in other ways, such as email, is processed to answer the enquiry. For these purposes, enquiries may be stored in our Customer Relationship Management (CRM) system or similar methods used to manage enquiries.

• Processed data: Inventory data, communication data, contract data, content data, usage data, metadata
• Data subjects: Interested parties, online users and/or website visitors, business partners, third parties.
• Purpose of processing: Answering enquiries.
• Processing basis: Article 6 (1) (b) GDPR.
• Necessity / interest in processing: Necessary to answer the enquiries.
• External disclosure and purpose: No.
• Processing in third countries: No.
• The information regarding the storage of data of interested parties is the same as for the deletion of data within the above-mentioned processing activity “Comparative and Mediation Services"; otherwise, we will delete the requests, if their storage is no longer required, which is usually the case 6 months after the last contact; in the case of legal archiving obligations, the deletion takes place after their expiration;

Business analysis and market research

In order to operate our business economically, to be able to recognise market trends and the requirements of interested parties and users, we analyse the data we have on business transactions, contracts, enquiries, etc.

For this purpose, we merge the personal data of the interested parties from logins and comparison queries with the usage data of the customers.

• Processed data: Inventory data, communication data, contract data, content data, usage data, metadata.
• Processing basis: Article 6 (1) (f) GDPR.
• Data subjects: Customers, interested parties, business partners, visitors and users of the online offer.
• Purpose of processing: Business analysis, marketing, advertising, market research.
• Type, scope, functionality of the processing: Profiling, first party cookies.
• Necessity / interest in processing: Increasing user-friendliness, optimising the offer, business management.
• External disclosure and purpose: The analyses are for us alone and are not disclosed externally, unless they are anonymous analyses with summarised values.
• Processing in third countries: No.
• Deletion of data: The information regarding the storage of data of interested parties is the same as for the deletion of data within the above-mentioned processing activity “Comparative and Mediation Services”; incidentally, the overall economic analyses and general trend provisions are created anonymously if possible.

Data protection notice for applicants

This section will inform applicants about the processing of their data as part of the application process.

Application process

Applicants can submit their applications via the online form on our website. The data will be encrypted and transmitted to us according to the state of the art.

Alternatively, applicants can submit their applications via email. However, please note that emails are generally not sent in encrypted form and that applicants themselves must provide encryption. We cannot accept responsibility for the application’s transmission path between the sender and our server and therefore recommend using the online form.

Instead of applying via the online form and email, applicants still have the opportunity to send us the application by post. As part of the application process, your data will be used by the Human Resources Department, as well as other authorised individuals within be Around, particularly those involved in the application process, to verify your suitability for the advertised position. In addition, consent may be given for inclusion in our talent pool for the purpose of later recruitment. As part of our application process, we also use data from public directories, as well as careers networks (such as Xing, LinkedIn).

• Processed data: Inventory data, contact details, content data (application portfolio content, correspondence, internal comments).
• Special categories of personal data: Yes, as required for the application process or submitted by applicants (such as health data).
• Processing basis: Article 6 (1) (b) GDPR, Section 26 BDSG (German Federal Data Protection Act), Article 28 (3), sentence 1 GDPR.
• Data subjects: Applicant
• Purpose of processing: Implementing application process, selecting applicants.
• Special safeguards: Restrict access to application documents to bodies involved in the application process; encrypted transmission option.
• Necessity / interest in processing: The use of our recruiting tool is a requirement of our applicant selection process and is based on our legitimate interests, as well as the interests of applicants to carry out a quick and efficient application process.
• Processing in third countries: No.
• Deletion of data: The data provided by the applicants may be further processed by us for employment purposes in the event of a successful application; applicants' data will be deleted when an application is withdrawn, which the applicants are entitled to at any time. The deletion takes place, subject to legitimate cancellation by the applicant, after a period of six months, so that we are able to answer any follow-up questions to the application and meet our obligations under the General Equal Treatment Act (AGG). You can withdraw your consent informally at any time. Write to jobs@aroundhome.de.

External online presence

This section provides information about our data processing in connection with the operation of external online sites, e.g. on social media.

Online presence on social media

We maintain online presence on social networks and platforms in order to communicate with customers, interested parties and users that are active on those sites and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and the data processing guidelines of the respective operators shall apply. Unless otherwise stated in our Privacy Policy, we process users' data if they communicate with us on social networks and platforms, e.g. posting on our online services or sending us messages.

The links/buttons to social networks and platforms (hereinafter referred to as “social media”) used within our online offer only establish contact between social networks and users when users click on the links/buttons and the respective networks, and/or their websites are accessed. This function works like a regular online link.

• Social networks / platforms we use: Facebook, Instagram, LinkedIn, Pinterest, Twitter, Xing, YouTube.
• Processed data: Inventory data, communication data, content data, usage data, metadata.
• Special categories of personal data: Basically no, except as specified by users.
• Processing basis:  Article 6 (1) (f). GDPR.
• Data subjects: Users of social media sites (this may include interested parties and business partners).
• Purpose of processing: Information and communication.
• Type, scope, functionality of the processing: By operators of the respective platforms usually: Permanent cookies, tracking, targeting, remarketing, content and behavioural advertising.
• Necessity / interest in processing: Expectations of the users who are active on the platforms, business interests.
• External disclosure and purpose: Vis-a-vis the social networks / platforms.
• Processing in third countries: USA.
• Guarantee for processing in third countries: Privacy Shield.
• Deletion of data: The deletion rules of the respective platforms apply.

Web server and security

Hosting

The hosting services we use are designed to provide the following services:infrastructure and platform services, computing capacity, storage and database services, security services, technical maintenance services.

• Processed data: Inventory data, contact details, content data, contract data, usage data, meta / communication data.
• Special categories of personal data: No.
• Processing basis: Article 6 (1) (f) GDPR.
• Data subjects: Customers, interested parties, visitors to the online offer.
• Special safeguards: Order processing contract.
• Processing in third countries: No.
• External disclosure and purpose: Name, address, web host.
• Necessity / interest in processing: Safety, business interests.
• Deletion of data: The information regarding the storage of data of interested parties is the same as for the deletion of data within the above-mentioned processing activity “Comparative and Mediation Services”.

Server logs

With each access to the online offer, the server on which this online offer is located collects log files on which user data is stored. The data is used for statistical analysis to maintain and optimise server operation and for security purposes, e.g. to detect potential unauthorised access attempts.

• Processed data: Usage data and metadata (name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (previously visited page), IP address and the requesting provider).
• Special categories of personal data: No.
• Processing basis: Article 6 (1) (f) GDPR.
• Data subjects: Customers, interested parties, visitors to the online offer.
• Purpose of processing: Optimisation of server operation and security monitoring.
• Necessity / interest in processing: Safety, business interests.
• Processing in third countries: No.
• Deletion of data: 7 days after collection.

Content Delivery Network (CDN)

A Content Delivery Network is a service that helps deliver content faster from our online offer, especially large media files, such as graphics or scripts, using regionally distributed and Internet-connected servers.

• Processed data: The data flow between the web server and the user's browser, IP address.
• Special categories of personal data: No.
• Processing basis: Article 6 (1) (f) GDPR, Article 28 (3), sentence 1 GDPR.
• Data subjects: Customers, interested parties, business partners, employees and other staff, website visitors.
• Special safeguards: Order processing contract.
• Necessity / interest in processing: User-friendliness, business interests.
• External disclosure and purpose: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.
• Processing in third countries: USA.
• Guarantee for processing in third countries: https://www.privacyshield.gov/participant?id=a2zt0000000TTozAAG&status=Active
• Deletion of data: Only short temporary storage as part of the delivery.

Embedded content and features

This section contains information about the content, software or features (“content” for short) of other providers that we offer as part of our online offer on the basis of Article 6 (1) (f) GDPR (so-called “embedding”). Embedding is carried out to make our online offer more interesting to our users or for legal reasons, e.g. to be able to present videos or social media posts within our online offer. Embedding may also serve to improve the speed and security of the online offer, e.g. when software components or fonts are obtained from other sources. In all cases, the processed data includes the usage and metadata of the users as well as the IP address required to be transmitted to the provider for embedding the content. The data subjects include the visitors to our online offer. The data subject categories include the users of our online offer, customers and interested parties. Further explanations, especially regarding functionalities and safeguards, can be found in the definitions of terms at the end of this Privacy Policy. The deletion of the data is determined by the privacy policy of the providers of the embedded content.

Google services and content

We use the following Google services and content: YouTube – videos; Google Maps – maps; Google Fonts – fonts; Google – Recaptcha (detection of bots when forms are filled in).

• Processed data: Usage data, metadata.
• Type, scope, functionality of the processing: Permanent cookies, third-party cookies, interest-based marketing, tracking.

• Special safeguards: Pseudonymisation, opt-out.
• Opt-out: http://tools.google.com/dlpage/gaoptout?hl=de, https://adssettings.google.com/.
• External disclosure: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
• Privacy Policy: https://adssettings.google.com/authenticated.
• Processing in third countries: USA.
• Guarantee for processing in third countries: Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
• Deletion of data: The data will be deleted in accordance with the provisions of Google.

Facebook features and content

Features and content of Facebook can be integrated into our online offer. This may include content such as images, videos or text and buttons with which users can like content, subscribe to content creators or to our posts.

• Processed data: Usage data, metadata; if users are registered with the service, the above data can be linked to their profiles and to data stored on the service (in particular inventory data).
• Type, scope, functionality of the processing: Social plugins, permanent cookies, third-party cookies, interest-based marketing, tracking, remarketing.
• Opt-out: Opt-out: https://www.facebook.com/settings?tab=ads, http://www.youronlinechoices.com/uk/your-ad-choices/ (EU), http://www.aboutads.info/choices (US).

• External disclosure: Facebook Inc., 180 Jefferson Dr, Menlo Park, CA 94025, USA.
• Privacy Policy: https://www.facebook.com/policy.php.  
• Processing in third countries: USA.
• Guarantee for processing in third countries: Privacy Shield https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
• Deletion of data: The data will be deleted in accordance with the provisions of Facebook.

Instagram features and content

Features and content of Instagram can be integrated into our online offer. This may include content such as images, videos or text and buttons with which users can like content, subscribe to content creators or to our posts.

• Processed data: Usage data, metadata; if users are registered with the service, the above data can be linked to their profiles and to data stored on the service (in particular inventory data).
• Type, scope, functionality of the processing: Social plugins, permanent cookies, third-party cookies, interest-based marketing, tracking, remarketing.
• External disclosure: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA
• Privacy Policy: https://adssettings.google.com/authenticated.
• Processing in third countries: USA.
• Guarantee for processing in third countries: Privacy Shield https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
• Deletion of data: The data is deleted in accordance with the provisions of Instagram.

Pinterest features and content

Features and content of Pinterest can be integrated into our online offer. This may include content such as images, videos or text and buttons with which users can like content, subscribe to content creators or to our posts.

• Processed data: Processed data: Usage data, metadata; if users are registered with the service, the above data can be linked to their profiles and to data stored on the service (in particular inventory data).
• Type, scope, functionality of the processing: Social plugins, permanent cookies, third-party cookies, interest-based marketing, tracking, remarketing.
• External disclosure: Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA.
• Privacy Policy: https://about.pinterest.com/de/privacy-policy.
• Processing in third countries: USA.
• Deletion of data: The data is deleted in accordance with the provisions of Pinterest.

Twitter features and content

Features and content of Twitter can be integrated into our online offer. This may include content such as images, videos or text and buttons with which users can like content, subscribe to content creators or to our posts.

• Processed data: Usage data, metadata; if users are registered with the service, the above data can be linked to their profiles and to data stored on the service (in particular inventory data).
• Type, scope, functionality of the processing: Social plugins, permanent cookies, third-party cookies, interest-based marketing, tracking, remarketing.
• Opt-out: https://twitter.com/personalization.
• External disclosure: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
• Privacy Policy: https://twitter.com/de/privacy.
• Processing in third countries: USA.
• Guarantee for processing in third countries: Privacy Shield https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
• Deletion of data: The data is deleted in accordance with the provisions of Twitter.

Xing features and content

Features and content of Xing can be integrated into our online offer. This may include content such as images, videos or text and buttons with which users can like content, subscribe to content creators or to our posts.

• Processed data: Usage data, metadata; if users are registered with the service, the above data can be linked to their profiles and to data stored on the service (in particular inventory data).
• Type, scope, functionality of the processing: Social plugins, permanent cookies, third-party cookies, interest-based marketing, tracking, remarketing.
• External disclosure: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.
• Privacy Policy: https://www.xing.com/app/share?op=data_protection.
• Processing in third countries: No.
• Deletion of data: The data is deleted in accordance with the provisions of Xing.

LinkedIn features and content

Features and content of LinkedIn can be integrated into our online offer. This may include content such as images, videos or text and buttons with which users can like content, subscribe to content creators or to our posts.

• Processed data: Usage data, metadata; if users are registered with the service, the above data can be linked to their profiles and to data stored on the service (in particular inventory data).
• Type, scope, functionality of the processing: Social plugins, permanent cookies, third-party cookies, interest-based marketing, tracking, remarketing.
• Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
• External disclosure: LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
• Privacy Policy: https://www.linkedin.com/legal/privacy-policy. .
• Processing in third countries: USA.
• Guarantee for processing in third countries: Privacy Shield ps://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
• Deletion of data: The data is deleted in accordance with the provisions of LinkedIn.

Marketing

This section provides information about the data processing we conduct for the purpose of optimising our marketing and market research activities.

Information sent by personalised newsletter

We send newsletters, emails and other electronic notifications containing advertising information (hereinafter referred to as “newsletter”) only with the consent of the recipient or with legal permission. Subscriber data is logged because we are required to prove registration. Unless the content of the newsletter is expressly set out on registration to the newsletter, the newsletter will contain information regarding our company and our services and offers, in particular services in which the recipient has declared an interest (e.g. if a user shows an interest in kitchens as part of the consent process). Non-promotional information, however, includes notifications that are sent as part of a contract or business relationship. This includes the dispatch of service emails with requested comparison offers or comparable services, technical or organisational information within our provision of service, information on technical and legal changes, queries about orders, etc. If we have received your consent to personalised information, we will evaluate your user behaviour on our website and within the newsletter sent by us and allocate it to your user profile. We will continue to store information about the devices used, opening, clicking and reading behaviour in emails, as well as subject areas that have been visited on the website. For technical reasons, this information is stored as personalised data for each user. However, it is used to tailor content and offers to the user rather than to observe individual users. Information that we collect in addition to the email address (such as name) is used to personally address the users or tailor the content of the newsletter to the users.

• Content of the newsletter: As stated in the registration form, otherwise information about our services and our company.
• Processed data: Inventory data (email address), usage data (time of registration, double-opt-in confirmation time, IP address, opening of the email, time and place, time and click on a link in the newsletter).
• Special categories of personal data: No (except health data, if these are taken into account when selecting the topics of a newsletter on the basis of previous comparison queries from interested parties).
• Processing basis: Article 6 (1) (a), Article 7 GDPR and Section 7, para. 2, no. 3 UWG (German Act against Unfair Competition), para. 3 (shipping & performance measurement), Article 6 (1) (c) in conjunction with Article 7 (1) GDPR (logging, performance measurement, if not part of the consent)
• Data subjects: Email recipient
• Purpose of processing: Mailing of newsletter, optimisation, proof of consent.
• Type, scope, functionality of the processing: Web beacon.
• Necessity / interest in processing: Only the email is required for shipping. The other information is voluntary and serves to personalise and optimise content based on the interests of users; the reason for logging is the obligation to prove consent; performance measurement is carried out by users whose consent includes performance measurement, based on consent and otherwise based on legitimate interests in the optimisation of content for users and based on business interests
• Opt-out: An opt-out link is available in every newsletter.
• External disclosure and purpose: “Mailchimp”, Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA, mailing of newsletters, security and optimisation of Mailchimp’s mailing services.
• Privacy Policy: https://mailchimp.com/legal/privacy/.
• Special safeguards: Order processing contract with Mailchimp.
• Processing in third countries: USA.
• Guarantee for processing in third countries: Privacy Shield, https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active.
• Deletion of data:
  We may save the submitted email addresses for up to three years based on our legitimate interests before deleting them for the purpose of sending out newsletters in order to provide evidence of prior consent. The purpose of the processing of this data is limited to a possible defence against claims. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed at the same time. Your consent to the storage of the data, the email address and their use for sending newsletters can be withdrawn at any time. The withdrawal can be made via a link in the newsletters, the unsubscribe function on our website or an email to: datenschutz@aroundhome.de.

Communication via post, email, fax or telephone

Dispatch of information material, telephone contact for the execution of settlement and mediation contracts.

• Processed data: Inventory data, contact details, contract data, content data.
• Special categories of personal data: No, except for health data that is part of the comparison and mediation service.
• Processing basis: Article 6 (1) (a), Article 7 GDPR with consent, Article 6 (1) (b) GDPR when contacting in the context of contract execution, Article 6 (1) (f) GDPR in connection with legal requirements for advertising communications..
• Data subjects:  Interested parties, business partners. 
• Purpose of processing: Advertising communication.
• Type, scope, functionality of the processing: The contact takes place only with consent of the contact partners or within the framework of the legal permissions.
• Necessity / interest in processing: Information and business interests.
• External disclosure and purpose: No.
• Processing in third countries: No.
• Deletion of data: With objection/withdrawal or elimination of the contact authorisations; the information regarding the storage of data of interested parties is the same as for the deletion of data within the above-mentioned processing activity “Comparison and Mediation Services”.

Optimisation and security

This section provides information about the data processing we conduct for the purpose of optimising our online offer. Above all, it serves to improve the user-friendliness and functionality of our online offer.

 

Mouseflow

Mouseflow allows us to track the effects of various changes to a website (such as changes in input fields, design, etc.) using so-called “A/B testing” and pseudonymous observation of user behaviour.

• Processed data: Usage data, metadata.
• Type, scope, functionality of the processing: Heatmaps, recording the use of the online offer (pseudonymised), permanent cookies,third-party cookies.
• Special safeguards: IP-masking, pseudonymisation, opt-out.
• Opt-out: https://mouseflow.com/opt-out/.
• External disclosure: Mouseflow Inc., 2205 152nd Ave NE, Redmond, WA 98052, USA.
• Privacy Policy: https://mouseflow.com/privacy/, https://mouseflow.com/gdpr/.
• Processing in third countries: USA.
• Guarantee for processing in third countries: https://www.privacyshield.gov/participant?id=a2zt0000000TS56AAG&status=Active.
• Deletion of data: 1-12 months.

Visual Website Optimizer

Visual Website Optimizer allows us to track the effects of various changes to a website (such as changes in input fields, design, etc.) using so-called “A/B testing”.

• Processed data: Usage data, metadata.
• Type, scope, functionality of the processing: A/B testing, heatmaps, click tracking,  permanent cookies, third-party cookies.
• Special safeguards: Opt-out, pseudonymisation.
• Opt-out: https://www.checkdomain.de/?vwo_opt_out=1.
• External disclosure: Wingify Software Private Limited, 404, Gopal Heights, Netaji Subhash Place, Pitam Pura, Delhi 110034, India.
• Privacy Policy: https://vwo.com/privacy-policy/.
• Processing in third countries: India.
• Deletion of data: 6 months.

Audience measurement, online marketing and technology partners

This section contains information about the technology partner services we use for audience measurement and online marketing. Their use is based on Article 6 (1) (f) GDPR and our interest in increasing usability, optimising our offer and its business efficiency. The processed data includes the usage and metadata in all cases. Further explanations, especially regarding functionalities and safeguards, can be found in the definitions of terms at the end of this Privacy Policy. Unless otherwise stated, data are deleted according to the privacy statements of the technology partners.

AdRoll

We use the services of AdRoll for the purpose of personalised marketing, e.g. display of advertisements within other online offers based on the alleged user interests.

• Processed data: Usage data, metadata.
• Type, scope, functionality of the processing: Permanent cookies, third-party cookies, tracking, remarketing, targeting, interest-based marketing, profiling.
• Special safeguards: Opt-out.
• Opt-out: http://www.networkadvertising.org/choices/.
• External disclosure: AdRoll Advertising Limited, Attn: Privacy Level 6 1, Burlington Plaza Burlington Road Dublin 4, Ireland.
• Privacy Policy: http://www.adrollgroup.com/privacy.
• Processing in third countries: No.
• Deletion of data: 12 months.

Conversant

We use Conversant service for the purpose of personalised marketing, e.g. display of advertisements within other online offers based on the alleged user interests.

• Processed data: Usage data, metadata.
• Type, scope, functionality of the processing: Permanent cookies, third-party cookies, fingerprints, tracking, remarketing, interest-based marketing, web beacons, profiling, location data.
• Special safeguards: Opt-out.
• Opt-out: http://optout.conversantmedia.com.
• External disclosure: Conversant, LLC., 1406 Pearl St, Boulder, CO 80302, USA.
• Privacy Policy: http://de.conversantmedia.eu/legal/datenschutzerklaerung.  
• Processing in third countries: USA.
• Deletion of data: 6 months.

Google Tag Manager

Google Tag Manager is a solution that allows us to manage so-called “website tags” through one interface (including, for example, Google Analytics and other Google marketing services in our online offer). The tag manager itself (which implements the tags) does not process users' personal data. With regard to the processing of users' personal data, reference is made to the following information about Google's services. Use Policy: https://www.google.com/intl/de/tagmanager/use-policy.html.

Google Analytics

We use Google Analytics for the purpose of audience measurement and target group formation.

• Processed data: Usage data, metadata, customer ID with us (Google receives the customer ID only as a pseudonymous date without the associated inventory data, such as name, address or email of the customer).
• Type, scope, functionality of the processing: Permanent cookies, third-party cookies, tracking, interest-based marketing, profiling, custom audiences, remarketing.
• Special safeguards: Pseudonymisation, IP masking, conclusion of order processing contract, opt-out.
• Opt-out: http://tools.google.com/dlpage/gaoptout?hl=de (Google Analytics browser add-on), https://adssettings.google.com/ (advertisement settings).
• External disclosure: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
• Privacy Policy: https://adssettings.google.com/authenticated.
• Processing in third countries: USA.
• Guarantee for processing in third countries: Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
• Deletion of data: 14 months.

Google AdWords

We use Google AdWords to measure the success of the advertisements we show on Google.

• Processed data: Usage data, metadata, customer ID with us (Google receives the customer ID only as a pseudonymous date without the associated inventory data, such as name, address or email of the customer).
• Type, scope, functionality of the processing: Permanent cookies, third-party cookies, tracking, conversion measurement, interest-based marketing, profiling.
• Special safeguards: Pseudonymisation, IP masking, conclusion of order processing contract, opt-out.
• Opt-out: http://tools.google.com/dlpage/gaoptout?hl=de (Google Analytics browser add-on), https://adssettings.google.com/ (advertisement settings).
• External disclosure: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
• Privacy Policy: https://adssettings.google.com/authenticated.
• Processing in third countries: USA.
• Guarantee for processing in third countries: Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
• Deletion of data: 14 months.

Google Double Click

We use Google Double Click to measure the success of the advertisements we show on Google.

• Processed data: Usage data, metadata, customer ID with us (Google receives the customer ID only as a pseudonymous date without the associated inventory data, such as name, address or email of the customer).
• Type, scope, functionality of the processing: Permanent cookies, third-party cookies, tracking, conversion measurement, interest-based marketing, profiling.
• Special safeguards: Pseudonymisation, IP masking, conclusion of order processing contract, opt-out.
• Opt-out: http://tools.google.com/dlpage/gaoptout?hl=de (Google Analytics browser add-on), https://adssettings.google.com/ (advertisement settings).
• External disclosure: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
• Privacy Policy: https://adssettings.google.com/authenticated.
• Processing in third countries: USA.
• Guarantee for processing in third countries: Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
• Deletion of data: 14 months.

Facebook Pixel

We use Facebook Pixel for target group formation and performance measurement of the advertisements we post on Facebook.

Processed data: Usage data, metadata; if users are registered on Facebook, the data will be linked to their Facebook profiles and their associated data (especially inventory data).

• Processed data: Usage data, metadata.
• Type, scope, functionality of the processing: Permanent cookies, third-party cookies, tracking, conversion measuring, interest-based marketing, profiling, custom audiences from website.
• Special safeguards: Encrypted communication between Facebook and our online offer.
• Opt-out: https://www.facebook.com/settings?tab=ads, http://www.youronlinechoices.com/uk/your-ad-choices/ (EU), http://www.aboutads.info/choices (US).
• External disclosure: Facebook Inc., 180 Jefferson Dr, Menlo Park, CA 94025, USA.
• Privacy Policy: https://www.facebook.com/policy.php.  
• Processing in third countries: USA.
• Guarantee for processing in third countries: Privacy Shield https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
• Deletion of data: The data is deleted by Facebook when the customer’s data is deleted as part of the cancellation.

Microsoft Bing Ads

We use the “Bing Ads” conversion and tracking tool to gauge the success of the advertisements we post on Google.

• Processed data: Usage data, metadata.
• Type, scope, functionality of the processing: Permanent cookies, third-party cookies, tracking, conversion measuring, profiling.
• Special safeguards: IP masking, opt-out.
• Opt-out: http://choice.microsoft.com/de-DE/opt-out.
• External disclosure: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA,.
• Privacy Policy: http://choice.microsoft.com/de-DE/opt-out.
• Processing in third countries: USA.
• Guarantee for processing in third countries: Privacy Shield https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active.
• Deletion of data: 6 months.

Optimizely

To continually improve our web offers, we run tests on individual pages – for example, to find out the optimal placement of content. For such test purposes, we also process statistical data using the web analytics service “Optimizely”.

• Processed data: Usage data, metadata.
• Type, scope, functionality of the processing:  Permanent cookies,third-party cookies, A/B testing, tracking, profiling.
• Special safeguards: Opt-out, pseudonymisation.
• Opt-out: https://www.aroundhome.de/?optimizely_opt_out=true.
• External disclosure: Optimizely Inc., 631 Howard Street, Suite 100, San Francisco, CA 94105, USA.
• Privacy Policy: https://www.optimizely.com/de/privacy/.
• Processing in third countries: USA.
• Guarantee for processing in third countries: https://www.privacyshield.gov/participant?id=a2zt0000000TNkWAAW&status=Active.
• Deletion of data: 6 months.

Criteo

We use the services of Criteo for the purpose of personalised marketing, e.g. display of advertisements within other online offers based on the alleged user interests.

• Processed data: Usage data, metadata.
• Type, scope, functionality of the processing: Permanent cookies, third-party cookies, tracking, conversion measuring, remarketing, interest-based marketing, profiling, cross-device tracking.
• Special safeguards: Opt-out, IP-masking (full IP addresses are used only for the purpose of fraud detection, and assignment of sales to users for the purpose of performance measurement).
• Opt-out: https://www.criteo.com/de/privacy/.
• External disclosure: Criteo GmbH, Gewürzmühlstr. 11, 80538 Munich, Germany.
• Privacy Policy: https://www.criteo.com/de/privacy/.
• Processing in third countries: No.
• Deletion of data: 6 months.

VG Wort / Scalable Central Measurement System

We use the “Scalable Central Measurement Method” (SCM) of INFOnline GmbH (https://www.infonline.de) to ascertain statistical characteristics for determining the copy probability of texts. Anonymous measurements are taken. In order to recognise computer systems, traffic metering uses alternate session cookies or signatures created from different information automatically transmitted from your browser. IP addresses are only processed in anonymous form. The procedure has been developed in compliance with data protection regulations. The only goal of the procedure is to determine the copy probability of individual texts. At no time are individual users identified. Your identity always remains protected. You will not receive advertising through the system.

Many of our pages are provided with JavaScript calls, through which we report access to the collecting society Verwertungsgesellschaft Wort (VG Wort). In this way, we enable our authors to participate in the remuneration scheme of the VG Wort collecting society, which ensures legal remuneration for the use of copyrighted works in accordance with Section 53 UrhG (German Copyright Act).

• Processed data: Usage data, metadata.
• Type, scope, functionality of the processing: Permanent cookies, third-party cookies, session cookie, tracking pixels.
• Special safeguards: IP masking, pseudonymisation, if possible anonymisation, opt-out.
• Opt-out: https://optout.ioam.de/.  
• External disclosure: INFOnline GmbH, Brühler Str. 9, D-53119 Bonn.
• Privacy Policy: https://www.infonline.de/datenschutz/benutzer.
• Processing in third countries: No.
• Deletion of data: 6 months.

Webtrekk audience measurement

 Short description of processing >For the statistical evaluation of our websites, we use the technologies of Webtrekk GmbH. We collect statistical data about the use of our web offer using the services of Webtrekk. This data is used to permanently improve and optimise our offers and services and thus make them more interesting.

• Processed data: Usage data, metadata.
• Type, scope, functionality of the processing: Targeting, permanent cookies, third-party cookies.
• Special safeguards: Webtrekk GmbH has been certified by TÜV Saarland in the area of data protection for the web controlling software used by be Around. In particular, the collection and processing of tracking data for data protection compliance and data security has been checked and certified; opt-out; IP masking, pseudonymisation.
• Opt-out: https://www.webtrekk.com/de/legal/opt-out-webtrekk/ (Opt-out cookie).
• External disclosure: Webtrekk GmbH, Boxhagener Str. 76-78, 10245 Berlin, Germany.
• Privacy Policy: https://www.webtrekk.com/de/legal/opt-out-webtrekk/.
• Deletion of data: 6 months.

Section IV – Definitions of terms

This section provides an overview of the terminology used in this Privacy Policy. Many of the terms are derived from the law and are defined above all in Article 4 GDPR. The legal definitions are binding. The following explanations are largely for the purpose of facilitating understanding. The terms are sorted alphabetically.

• A/B testing – A/B testing is designed to improve the usability and performance of online offers. This shows users different versions of a website or its components, such as input forms, where the content placement or labelling of navigation features may differ. Based on the behaviour of the users, e.g. lingering on the website or more frequent interaction with the components, it can be determined which of these websites or features are more in line with users’ needs.
• Affiliate links – “Affiliate links” are links by which the linking websites direct users to websites containing products or other offers. The operators of the respective linking websites can receive a commission if users follow the affiliate links and then take advantage of the offers. To that end, the providers must be able track whether users who are interested in certain offers take advantage of them using the affiliate links. Therefore, the functionality of affiliate links requires them to be supplemented with certain values ​​that become part of the link or are otherwise stored, e.g. in a cookie. The values ​​include, in particular, the source website (referrer), time, an online identifier of the operator of the website on which the affiliate link was located, an online identifier of the respective offer, an online identifier of the user, as well as tracking-specific values such as Ad ID, affiliate ID and categorisations.
• After-sales – “After-sales” are marketing techniques in which customers of an online shop are presented with advertising offers of other providers (which are usually based on the services or products purchased in the online store). Incidentally, after-sales work in the same way as affiliate links.
• Aggregated data – Aggregated data is summarised data that does not allow for inference to a person and is therefore not personal. For example, visit times can be stored on a website as averages.
• Anonymous data – Anonymity occurs when a person cannot be at least identified by the controller based on a piece of data available to him. Aggregated data, in particular, may be anonymous.
• Order processing/processor – “Processor" means a natural or legal person, public authority, agency or any other body that processes personal data on behalf of the controller.
• Specific categories of personal data – This is data indicating racial and ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data to uniquely identify a natural person, health data or data on the sex life or sexual orientation of a natural person.
• Data subject – See “Personal Data”.
• Click tracking – “Click tracking” allows movements of the users to be surveyed within an entire online offer. Since the results of these tests are more accurate if user interaction can be tracked over a period of time (e.g. being able to see if a user likes to return to a page), cookies are typically stored on users' computers for these test purposes.
• Conversion – “Conversion”, or “Conversion Measurement”, is a process by which the effectiveness of marketing activities can be determined. This is usually done by storing a cookie on the users' devices within the websites where the marketing activities take place and then retrieving them on the destination website (for example, we can see if advertisements we have placed on other websites have been successful).
• Cookies – “Cookies” are small files that are stored on users' computers. Different information can be stored within the cookies. A cookie is primarily used to store the information about a user (or the device on which the cookie is stored) during or after his visit to an online offer. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online offer and closes his browser. This type of cookie can store, for example, the contents of a shopping basket in an online store or a login status within a community. The term “permanent” or “persistent” refers to cookies that remain stored even after the browser has been closed. For instance, the login status can be stored in a community when the user returns after several days. Likewise, this type of cookie can store the interests of users for audience measurement or marketing purposes (see “Remarketing”, for example). “Third-party cookie” means cookies that are offered by providers other than the controller of the online offer (if it is only their cookies, these are known as “first-party cookies”).
• Custom audiences – “Custom audiences” are target groups defined for advertising purposes, e.g. insertion of advertisements. For instance, it can be concluded, based on a user's interest in certain products or topics on the Internet, that this user is interested in advertisements for similar products or is interested in the online shop where they viewed the products. “Lookalike audiences” (or similar target groups) are where content is shown that is deemed suitable for users whose profiles or interests match those of the users for whom the profiles were formed. Cookies and web beacons are typically used for the purpose of creating custom audiences and lookalike audiences. “Custom audiences from website” means that the target groups are formed on the basis of the visitors to their own website. “Custom audiences from file” means, for instance, that a list of email addresses is uploaded to the respective network or platform to form the target groups.
• Demographic data – Demographic data is general data about groups of people or individuals, e.g. characteristics such as age, gender, place of residence and social characteristics such as occupation, marital status and income. Demographic data is collected as part of audience measurement and in online marketing for the purpose of interest-based marketing or for business analyses used to determine target groups, for example.
• Third party – “Third party” means a natural or legal person, public authority, agency or any body other than the data subject, the controller, the processor and the persons authorised under the direct responsibility of the controller or processor, to process the personal data.
• Third country – Third countries are states in which the GDPR is not a directly applicable law, i.e. states that do not belong to the European Union (EU) or the European Economic Area (EEA).
• Consent – “Consent” of the data subject is any expression of will voluntarily given for a particular case, in an informed and unequivocal manner, in the form of a statement or other unambiguous confirmatory act with which the data subject indicates that they consent to the processing of their personal data.
• Embedding – see “Embedding”.
• Embedding – Embedding is where external content or software functions (see “Plugins”) are integrated into one’s own website so that they can be displayed or executed on that website. The content is not copied because it is accessed from the original server (for example, videos, pictures, posts on social networks, widgets with ratings). With embedding, it is technically necessary for the provider of the content to collect the user’s IP address in order to display the embedded content in the user's browser. Furthermore, the content provider can, for example, store cookies on users' devices.
• Enhanced matching – “Enhanced matching” is an option on Facebook Pixel, which means that users' inventory data, such as phone numbers, email addresses or Facebook IDs, are encrypted and sent to Facebook to be used to form target groups for Facebook Ads and only for that purpose.
• Error tracking – Error tracking recognises incorrectly executed programme code in order to eliminate it and thus to ensure the functionality and security of online offers.
• First party cookies – see “Cookies”.
• Heatmaps – “Heatmaps” are mouse movements of the users, which are grouped together to form an overall picture. They can help to recognise, for example, which website components are popular and which are less popular.
• IP address – The IP address (“IP” stands for Internet Protocol) is a sequence of numbers that can be identified by the devices connected to the Internet. When a user accesses a website on a server, it tells the server its IP address. The server then knows that it has to send the data packets containing the content of the website to this address.
• IP masking – “IP masking” refers to a method in which the last octet, i.e. the last two numbers of an IP address, are deleted, so that the IP address can no longer uniquely identify a person. Thus, IP masking is a means of pseudonymisation of processing techniques, especially in online marketing.
• Interest-based marketing and/or behavioural advertising – Interest-based and/or behavioural advertising is when profiling is used to determine the potential interest of users in advertisements (“online behavioural advertising”, OBA for short). Cookies and web beacons are generally used for these purposes.
• Lookalike audiences – see “Custom audiences”.
• Opt-in – The term “opt-in” means the same as register. If a registration (for example, by entering an email address in an online form field) is confirmed by sending a confirmation email to the owner of the email address, this is called a double-opt-in (DOI).
• Opt-out – The term opt-out means the same as unsubscribe and may constitute an objection (for example, to tracking) or termination (e.g. of a newsletter subscription).
• Opt-out cookie – An “opt-out cookie” is a small file (see “Cookies”) that is stored in your browser and that states that a tracking service, for example, should not process your data. The “opt-out cookie” only applies to the browser in which it was stored, i.e. where you clicked the opt-out link. If cookies are deleted in this browser, then you have to click the opt-out link again. Furthermore, an opt-out link can only be limited to the domain on which the opt-out link was clicked.
• Permanent cookies – See “Cookies”.
• Personal data/personal reference – “Personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); a natural person is considered to be identifiable if they can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, location data, online identifier (e.g. cookie) or one or more special features, that express the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
• Plugins/social plugins – Plugins (or “social plugins” in the case of social functions) are external software functions that are integrated into the online offer. For example, they can be used to display interaction elements (e.g. a “Like” button) or content (e.g. external comment function or posts on social networks).
• Profiling – “Profiling” means any type of automated processing of personal data that consists of using that personal information to analyse, evaluate or predict (e.g. the interest in certain content or products, the click behaviour on a website or the whereabouts) certain personal aspects relating to a natural person (depending on the type of profiling, this may include information relating to age, gender, location data and movement data, interaction with websites and their content, shopping habits, social interactions with other people). Cookies and web beacons are often used for profiling purposes.
• Privacy Shiel – The EU-US Privacy Shield is an informal agreement in the field of data protection law negotiated between the European Union and the United States of America. It consists of a series of assurances from the US government and a decision by the EU Commission. Companies that are certified under the Privacy Shield are guaranteed to comply with European data protection law (https://www.privacyshield.gov).
• Pseudonymisation/pseudonyms – “Pseudonymisation” is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without additional information being provided. Provided that this additional information is stored separately, it is guaranteed that the personal data will not be assigned to an identified or identifiable natural person; i.e. if an exact interest profile of the computer user is stored in a cookie (almost like a “marketing avatar”), but not the name of the user, then their data will be processed pseudonymously. If their name is stored as part of their email address or their IP address, then the processing is basically no longer pseudonymous.
• Audience measurement – The audience measurement is used to evaluate the flow of visitors to an online offer and their behaviour, interests or demographic information, such as age or gender. Audience measurement analysis helps site owners, for example, to recognise which types of people visit their website at what time and what content interests them. In this way, for example, they can better tailor the content of the website to the needs of their visitors. Cookies and web beacons are often used for audience measurement analysis.
• Remarketing/retargeting – “Remarketing”, or “retargeting”, is when it is noted for advertising purposes which products have interested a user on a web page, so as to remind them about these products on other websites, e.g. in advertisements. For the purpose of profiling, cookies are generally used.
• Session cookies – See “Cookies”.
• Single sign-on – A “single sign-on” or “single sign-on authentication” is a process that allows users to use an account for one online offer to register for another online offer. The prerequisite for single sign-on authentication is that users are registered with the respective single sign-on provider and enter the required access data on the web form provided for this purpose. Authentication takes place directly with the respective single sign-on provider. With such authentication, we receive a user ID telling us that the user is logged in with the respective single sign-on provider under this user ID. We also receive an ID which is no longer usable (so-called “user handle”). Whether we receive further data depends solely on the single sign-on process used, the data selected to be released in the course of the authentication, and also which data the user releases in the privacy settings or other settings of the single sign-on user account. Depending on the single sign-on provider and the user’s selection, this can be different data, usually the email address and the user name. The password entered during the single sign-on process is neither visible to us nor stored by us. Users are kindly requested to note that the information which is stored with us can be automatically matched to their single sign-on user account, but this is not always possible nor actually carried out. If, for example, users change their email address, this must be manually changed in the user account they have with us. If users decide they wish to stop using the link from their single sign-on account to access the single sign-on process, they must go to the single sign-on account and remove this link. If users would like us to delete their data, they must cancel their registration with us.
• Third-party cookies – See “Cookies”.
• Tracking – “Tracking” is when the behaviour of users across multiple online offers can be retraced, e.g. for remarketing purposes. The behavioural and interest data collected with regard to the online offers used is stored as user profiles in cookies or on the servers of the marketing service providers (such as Google or Facebook).
• Controller – “Controller” means the natural or legal person, public authority, agency or any other body that alone or jointly decides on the purposes and means of processing personal data.
• Processing – “Processing” means any process performed with or without the aid of automated procedures, or any such series of procedures relating to personal data. The term is far-reaching and includes virtually every handling of data.
• Web beacons – “Web beacons” (or “pixels”, “measurement pixels” or “tracking pixels”) are small, pixel-sized graphics, which are incorporated into websites or HTML emails. This allows you to determine, for example, whether an email has been opened (at least if the image display is activated in emails) or how often a website is accessed by a user.
• Widgets – See “Embedding”.
• Tracking pixels – See “Web beacons”.

Section V – Further information

Please note that this Privacy Policy applies only to web pages of be Around. If our pages contain links to third-party websites, our Privacy Policy does not apply to them. Please refer to the data protection regulations that apply to each site.

You can find further information about us in our legal notice: www.aroundhome.de/impressum/.

If you still have questions or if you have any suggestions or requests, please contact us by email at datenschutz@aroundhome.de.