Privacy policy
Privacy Policy
1. At a Glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any data that can be used to personally identify you. For detailed information on data protection, please refer to our Privacy Policy listed below this text.
Data recording on this website
Who is the responsible party for the recording of data on this website (i.e., the “controller”)?
Data processing on this website is carried out by the website operator. You can find the operator’s contact information in the “Information on the Data Controller” section of this privacy policy.
How do we record your data?
Data processing on this website is carried out by the website operator. You can find the operator’s contact information in the “Information on the Data Controller” section of this privacy policy. Your data is collected, in part, when you provide it to us. This may include, for example, data that you enter into a contact form.
Data processing on this website is carried out by the website operator. You can find the operator’s contact information in the “Information on the Data Controller” section of this privacy policy. Your data is collected, in part, when you provide it to us. This may include, for example, data that you enter into a contact form.
What are the purposes we use your data for?
A portion of the information is generated to guarantee the error free provision of the website. Other data may be used to analyze your user patterns.
What rights do you have as far as your information is concerned?
You have the right at any time to receive, free of charge, information about the source, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you may revoke that consent at any time with future effect. In addition, you have the right to request that the processing of your personal data be restricted under certain circumstances. You also have the right to file a complaint with the competent supervisory authority.
Please feel free to contact us at any time regarding this matter or any other questions you may have about data protection.
Analysis tools and tools provided by third parties
When you visit this website, your browsing behavior may be analyzed for statistical purposes. This is primarily done using so-called analytics tools.
Detailed information about these analytics programs can be found in the following privacy policy.
2. Hosting
External Hosting
This website is hosted externally. The personal data collected on this website is stored on the host’s servers. This may include, for example, IP addresses, contact requests, metadata and communication data, contract data, contact information, names, website visits, and other data generated through a website.
External hosting is carried out for the purpose of fulfilling our contractual obligations to our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of ensuring the secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, provided that the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as defined by the TDDDG. Consent may be revoked at any time.
Our hosting provider(s) will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.
Data processing
We have entered into a data processing agreement (DPA) in accordance with Article 28 of the GDPR for the use of the aforementioned service. This is a contract required under data protection law that ensures the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
3. General information and mandatory information
Privacy policy
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this privacy policy.
When you use this website, various types of personal data are collected. Personal data is information that can be used to identify you personally. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.
Please note that data transmission over the Internet (e.g., when communicating via email) may be subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.
Information about the responsible party (referred to as the “controller” in the GDPR)
The entity responsible for data processing on this website is:
Berlin TXL Management GmbH
Frank Wolters, Managing Director
Urban Tech Republic, Building V
Tegel Airport 1
13405 Berlin
Tel.: +49 30 577 140 10
Email: info@berlintxl.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).
Storage duration
Unless a more specific retention period is stated in this privacy policy, we will retain your personal data until the purpose for which it was collected no longer applies. If you submit a valid request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, the data will be deleted once those grounds no longer apply.
General information on the legal basis for the data processing on this website.
If you have consented to the processing of your data, we process your personal data pursuant to Article 6(1)(a) of the GDPR. In the event of explicit consent to the transfer of personal data to third countries, the data processing is also carried out pursuant to Article 49(1)(a) of the GDPR. If you have consented to the storage of cookies or to access to information on your device (e.g., via device fingerprinting), data processing is also carried out on the basis of Section 25(1) of the TDDDG. You may withdraw your consent at any time. If your data is necessary for the performance of a contract or for the implementation of precontractual measures, we process your data pursuant to Article 6(1)(b) of the GDPR. Furthermore, we process your data to the extent that it is necessary to comply with a legal obligation, pursuant to Article 6(1)(c) of the GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) of the GDPR. The following sections of this privacy notice provide information on the legal bases applicable in each specific case.
Designation of a data protection officer
The data protection officer for the data controller is:
Mr. Asmus Eggert, Attorney at Law
mip Consult GmbH
Wilhelm-Kabus-Straße 9
10829 Berlin
Tel: +49 (0) 30 – 20 88 999 – 0
Fax: +49 (0) 30 – 20 88 999 – 88
Website: www.mip-consult.de
Email: kontakt@mip-consult.de
Information on data transfer to the USA and other non-EU countries.
The data provided is processed within the European Union and in the United States. When transferring data to the United States, we ensure that the recipients of the data are certified under the EU-U.S. Data Privacy Framework or that we enter into EU Standard Data Protection Clauses with recipients who are not certified. If we base the data transfer on the EU Standard Data Protection Clauses, we will implement additional security measures to protect your data and ensure an adequate level of protection for your personal data. You have the option to receive a copy of the EU Standard Data Protection Clauses or to review them. If necessary, we will obtain your explicit consent for the transfer of data to the United States.
Revocation of your consent to the processing of data
A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.
Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)
If data processing is based on Article 6(1)(e) or (f) of the GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on these provisions. You can find the specific legal basis on which processing is based in this Privacy Policy. If you object, we will no longer process your personal data in question unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims (objection under Article 21(1) of the GDPR).
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Article 21(2) of the GDPR).
Right to log a complaint with the competent supervisory agency
In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.
Right to data portability
You have the right to demand that we hand over any data we automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.
Information about, rectification and eradication of data
Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time.
Right to demand processing restrictions
You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restriction of processing applies in the following cases:
- In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
- If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data in lieu of demanding the eradication of this data.
- If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
- Wenn Sie einen Widerspruch nach Art. 21 Abs. 1 DSGVO eingelegt haben, muss eine Abwägung zwischen Ihren und unseren Interessen vorgenommen werden. Solange noch nicht feststeht, wessen Interessen überwiegen, haben Sie das Recht, die Einschränkung der Verarbeitung Ihrer personenbezogenen Daten zu verlangen.
If you have restricted the processing of your personal data, such data—apart from its storage—may be processed only with your consent, or for the purpose of asserting, exercising, or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the European Union or a Member State.
SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential information—such as orders or inquiries you send to us as the website operator—this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock icon in your browser’s address bar.
If SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.
4. Recording of data on this website
Cookies
If personal data is processed by individual cookies, such processing is carried out in accordance with Article 6(1)(b) of the GDPR for the performance of a contract, in accordance with Article 6(1)(f) of the GDPR to safeguard our legitimate interests in the reliable and secure provision of our website, or in accordance with Article 6(1)(a) of the GDPR based on your consent.
We use cookies on our website. A cookie consists of a key and a value; it is managed by your browser and is often stored in a database and on your device when you visit a website.
Some cookies are deleted when you end your browser session—that is, after you close your browser (“session cookies”). Other cookies remain on your device for the specified duration of the cookie, unless you manually delete them beforehand.
Cookies may be technically necessary for the operation of a website. No consent is required for these cookies. Other cookies, on the other hand, may enhance a website’s functionality or be used for marketing or to collect statistics to improve the website. These cookies generally require consent.
We use the following cookie(s) on our website:
| Name | < 0 >Type | Purpose | Technically Necessary | Retention Period |
| PHPSESSID | HTTP Cookie | Stores language settings | Yes | Session |
| ts_maps_consent | HTTP Cookie | Stores consent for Google Maps | Yes |
Server log files
The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:
- The type and version of browser used
- The used operating system
- Referrer URL
- The hostname of the accessing computer
- The time of the server inquiry
- The IP-Adress
This data is not combined with other data sources.
This data is collected pursuant to Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in ensuring that its website functions properly and is optimized—to this end, server log files must be collected.
Contact form
If you submit inquiries to us via the contact form, we will store the information you provide in the inquiry form—including the contact information you provide there—for the purpose of processing your inquiry and in case we have any follow-up questions. We will not share this information without your consent.
This data is processed on the basis of Article 6(1)(b) of the GDPR, provided that your inquiry is related to the performance of a contract or is necessary for the implementation of precontractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling inquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), provided that such consent was requested; you may withdraw your consent at any time.
The data you enter in the contact form will remain with us until you request that we delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions—in particular retention periods—remain unaffected.
Request by e-mail, telephone, or fax
If you contact us by email, phone, or fax, we will store and process your inquiry, including all personal data contained therein (name, inquiry), for the purpose of handling your request. We will not disclose this data without your consent.
This data is processed on the basis of Article 6(1)(b) of the GDPR, provided that your inquiry is related to the performance of a contract or is necessary for the implementation of precontractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling inquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), provided that such consent was requested; you may withdraw your consent at any time.
The data you send us via contact requests will remain with us until you request that we delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions—in particular statutory retention periods—remain unaffected.
5. Analysis tools and advertising
Matomo
This website uses the open-source web analytics service Matomo.
With the help of Matomo, we are able to collect and analyze data on how visitors use our website. This allows us, among other things, a. to determine when specific pages were viewed and from which region the visitors are coming. We also collect various log files (e. g., IP addresses, referrers, browsers, and operating systems used) and can track whether our website visitors perform certain actions (e. g., clicks, purchases, etc.).
The use of this analytics tool is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, provided that the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as defined by the TDDDG. Consent may be revoked at any time.
Tracking Opt-Out
IP anonymization
For analysis with Matomo we use IP anonymization. Your IP address is shortened before the analysis, so that it is no longer clearly assignable to you.
Analysis without cookies
We have configured Matomo in such a way that Matomo will not store cookies in your browser.
Hosting
We host Matomo exclusively on our own servers so that all analysis data remains with us and is not passed on.
6. Newsletter
Newsletter data
If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected or only on a voluntary basis. For the handling of the newsletter, we use newsletter service providers, which are described below.
Brevo (formerly Sendinblue)
We use Brevo, provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, to send newsletters.
With Brevo, we can analyze our newsletter campaigns—for example, whether a newsletter message was opened. This allows us to identify which links are important and which are less important. We can also determine whether certain actions were taken after the message was opened.
If you do not want Brevo to perform the aforementioned analyses, you must unsubscribe from the newsletter. You will find an unsubscribe link in every newsletter message. You can also unsubscribe from the newsletter directly on our website.
Your data is processed based on your consent to receive the newsletter (Art. 6(1)(a) GDPR). You may revoke this consent at any time. The lawfulness of any data processing that has already taken place remains unaffected by the revocation.
The data we have stored regarding your newsletter subscription will be retained until you unsubscribe from the newsletter, at which point it will be deleted from our servers and from Brevo’s servers. This does not affect any other data.
For more information, please refer to Brevo’s privacy policy at: https://www.brevo.com/de/legal/privacypolicy/
We have contractually obligated Brevo to handle our customers’ data with care and not to disclose it to third parties.
7. Plug-ins and Tools
Google Fonts (local embedding)
This site uses so-called Google Fonts, provided by Google, to ensure consistent font display. The Google Fonts are installed locally. No connection is made to Google’s servers.
For more information about Google Fonts, visit https://developers.google.com/fonts/faq and Google’s Privacy Policy: https://policies.google.com/privacy?hl=de.
Google Maps
This site uses the Google Maps mapping service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Maps is not activated without the user’s consent. All Google Maps integrations on this website require an opt-in. Google Maps is activated only when the user selects the opt-in option.
To use the features of Google Maps, it is necessary to store your IP address. This information is typically transmitted to a Google server in the United States and stored there. The provider of this site has no control over this data transfer. When Google Maps is enabled, Google may use Google Fonts to ensure consistent font rendering. When you open Google Maps, your browser loads the necessary web fonts into its cache to display text and fonts correctly.
We use Google Maps to ensure that our online offerings are presented in an appealing way and that the locations listed on our website are easy to find. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, provided that the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as defined by the TDDDG. Consent may be revoked at any time.
Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses. For details, see here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
For more information on how user data is handled, please see Google’s Privacy Policy: https://policies.google.com/privacy?hl=de.
Wordfence
We have integrated Wordfence into this website. The provider is Defiant Inc., Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter “Wordfence”).
Wordfence is used to protect our website from unauthorized access or malicious cyberattacks. To this end, our website establishes a persistent connection to Wordfence’s servers so that Wordfence can compare the access attempts made on our website against its databases and block them if necessary.
The use of Wordfence is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in protecting its website as effectively as possible against cyberattacks. For more details, see: https://www.wordfence.com/help/general-data-protection-regulation/.
Data processing
We have entered into a data processing agreement (DPA) in accordance with Article 28 of the GDPR for the use of the aforementioned service. This is a contract required under data protection law that ensures the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
8. Our Social Media Presence
This privacy policy applies to the following social media accounts
https://www.facebook.com/profile.php?id=100064603577248
https://twitter.com/B_TXL
https://twitter.com/B_TXL_Wohnen
https://www.instagram.com/berlintxl/
https://www.xing.com/pages/tegel-projekt-gmbh
https://www.linkedin.com/company/tegel-projekt-gmbh/
https://www.youtube.com/@berlintxl3476
Data Processing by Social Networks
We maintain publicly accessible profiles on social media platforms. You can find a list of the specific social media platforms we use below.
Social networks such as Facebook, Twitter, etc., can generally analyze your user behavior in detail when you visit their website or a website with integrated social media content (e.g., Like buttons or advertising banners). Visiting our social media pages triggers numerous data processing operations relevant to data protection. Specifically:
If you are logged into your social media account and visit our social media page, the operator of the social media platform may associate this visit with your user account. However, your personal data may also be collected even if you are not logged in or do not have an account with the respective social media platform. In this case, data is collected, for example, through cookies stored on your device or by recording your IP address.
Using the data collected in this way, social media platform operators can create user profiles that store your preferences and interests. This allows them to display interest-based ads to you both on and off the respective social media platform. If you have an account with the respective social network, interest-based ads may be displayed on all devices on which you are currently logged in or have been logged in.
Please also note that we are unable to track all data processing activities on social media platforms. Depending on the provider, additional data processing operations may therefore be carried out by the operators of the social media platforms. For details, please refer to the terms of use and privacy policies of the respective social media platforms.
Legal Basis
Our social media accounts are intended to ensure the broadest possible online presence. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. The analytics processes initiated by social networks may be based on different legal grounds, which must be specified by the operators of the social networks (e.g., consent within the meaning of Article 6(1)(a) of the GDPR).
Data Controller and Exercising Your Rights
When you visit one of our social media pages (e.g., Facebook), we are jointly responsible with the operator of the social media platform for the data processing activities triggered by that visit. You may generally exercise your rights (right of access, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint) both with us and with the operator of the respective social media platform (e.g., Facebook).
Please note that, despite our shared responsibility with the social media platform operators, we do not have full control over the data processing activities of these platforms. Our options depend largely on the corporate policies of the respective provider.
Storage duration
The data we collect directly through our social media presence will be deleted from our systems as soon as you request that we delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions—in particular retention periods—remain unaffected.
We have no control over how long your data is stored by social media platform operators for their own purposes. For more details, please contact the social media platform operators directly (e.g., in their privacy policies; see below).
Your Rights
You have the right at any time to receive, free of charge, information about the source, recipients, and purpose of your stored personal data. You also have the right to object, the right to data portability, and the right to file a complaint with the competent supervisory authority. Furthermore, you may request the correction, blocking, deletion, and, under certain circumstances, the restriction of the processing of your personal data.
Social Networks in Detail
We have a Facebook profile. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter “Meta”). According to Meta, the data collected is also transferred to the United States and other third countries.
We have entered into a joint processing agreement (Controller Addendum) with Meta. This agreement specifies which data processing operations we and Meta are responsible for when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can adjust your ad settings yourself in your user account. To do so, click the following link and log in: https://www.facebook.com/settings?tab=ads.
Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses. For details, see here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
For more details, please refer to Facebook’s Privacy Policy: https://www.facebook.com/about/privacy/.
We use the microblogging service Twitter. The provider is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
You can adjust your Twitter privacy settings yourself in your user account. To do so, click the following link and log in: https://twitter.com/personalization.
Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses. For details, please visit: https://gdpr.twitter.com/en/controller-to-controller-transfers.html.
For more details, please refer to Twitter’s Privacy Policy: https://twitter.com/de/privacy.
We have an Instagram profile. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses. For details, see: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875, and https://de-de.facebook.com/help/566994660333381.
For details on how Instagram handles your personal data, please refer to Instagram’s Privacy Policy: https://help.instagram.com/519522125107875.
We have a profile on XING. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. For details on how they handle your personal data, please refer to XING’s privacy policy: https://privacy.xing.com/de/datenschutzerklaerung.
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2,< 1 >Ireland. LinkedIn uses advertising cookies.
If you would like to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses. For details, see here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
For details on how LinkedIn handles your personal data, please refer to LinkedIn’s Privacy Policy: https://www.linkedin.com/legal/privacy-policy.
YouTube
We have a profile on YouTube. The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For details on how they handle your personal data, please refer to YouTube’s Privacy Policy: https://policies.google.com/privacy?hl=de.
Date of this Privacy Policy: June 20, 2024