myroom24.com Privacy Policy
Last updated: 06.04.2022
This Privacy Policy governs the handling of personal data processed when visiting the website or using the services of myroom24 GmbH ("myroom24"), Tauentzienstraße 13, c/o pro.work GmbH, 10789 Berlin, Germany, registered in the Commercial Register of the Local Court in Charlottenburg under registration number HRB 213919 B.
1. Processing of personal data
Personal data is any information relating to an identified or identifiable natural person, such as their name, address, telephone number, date of birth, bank details or IP address.
a) Visiting the website
Whenever you visit the website, even if you only use the website for information purposes, we process personal data from you that your browser transmits.
The following personal data of yours will be processed:
Name of the pages accessed, the browser used, the operating system and the requesting domain and time of access;
Used Search Machines;
Names of downloaded Files;
Your IP address;
Location Data.
The legal basis for processing this data is Art. 6 (1) 1 lit. f) GDPR, as we have a legitimate interest in properly displaying the website to you.
The data is deleted after 30 days.
b) Cookies
When you visit the website, cookies are stored on your device. Cookies are small text files that are stored on the user's device when visiting the website.
These may be Session Cookies or Temporary Cookies:
When you visit the website, a Session Cookie is stored in the memory of your end device, which makes it possible to assign various requests from your browser to the respective session. These are automatically deleted from your end device after the end of the browser session. We use this type of cookie to identify you throughout your visit to the website, even if you have visited sub-pages.
Temporary cookies are automatically deleted after a defined period of time. They enable us to identify you during repeated visits to our website on the basis of the feedback that a set cookie sends to our server during several browser sessions.
You can set your browser to allow either individual types of cookies or no cookies at all. You can visit our website even if your browser settings block the use of cookies. Please note, however, that unrestricted use of our website is not possible in this case for technical reasons.
For more information, please see our Cookie Policy https://myroom24.com/cookie-policy and below.
(1) Google Analytics
For the purpose of website analysis, we use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
In this context, cookies are stored on your end device and information about your use of the website, such as browser type/version, used operating system, the previously visited page, IP address and time of server request is collected. The IP addresses are anonymized so that an assignment is not possible (IP masking). This information is then used to create pseudonymized usage profiles. The collected data is transmitted to Google and stored on servers in the USA.
The data agreement is made on the basis of your consent given through the cookie banner in accordance with Art. 6 (1) 1 lit. a) GDPR.
You can prevent the processing of your data by Google by downloading and installing a browser add-on at https://tools.google.com/dlpage/gaoptout?hl=de.
For more information about Google Analytics, please visit https://policies.google.com/privacy?hl=de.
(2) Google Remarketing
In order to analyze your user behavior on the website, to classify you into certain advertising target groups and to subsequently display you interest-based advertising, we use the remarketing services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, ("Google").
When you visit our website and other websites that also use Google remarketing services, a cookie is set on your device. This saves your user behavior, technical information about your browser and operating system, your IP address, the referring website and the time of your visit.
The processing of your data is exclusively pseudonymized. This is not the case if you have expressly allowed Google to process the data without pseudonymization.
The data collected about you by the Google remarketing service is transmitted to Google and stored on servers in the USA.
The data agreement is made on the basis of your consent given through the cookie banner in accordance with Art. 6 (1) 1 lit. a) GDPR.
You can object to receiving advertising through the remarketing service via the settings and opt-out options provided by Google: http://www.google.com/ads/preferences.
For more information about the remarketing service, please visit https://www.google.com/policies/privacy.
(3) Google Conversion Tracking
On the website, we use conversion tracking from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
With the help of Google Conversion Tracking, we can see whether you have performed certain actions on the website. For example, we can evaluate which buttons on our website were clicked and how often. This information is used to compile statistics. We learn the total number of users who clicked on our ads and what actions they performed. We do not receive any information with which we can identify you personally.
The data agreement is made on the basis of your consent given via the cookie banner in accordance with Art. 6 (1) a) DS-GVO.
If you do not wish to participate in the tracking, you can deactivate the Google conversion tracking cookie via the user settings of your Internet browser.
For more information about Google Conversation tracking, visit https://policies.google.com/privacy?hl=de/.
(3) HubSpot
We use the services of the software provider HubSpot. HubSpot is a software company from the USA with a branch in Ireland (HubSpot European Headquarters, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland).
HubSpot is an integrated software solution that allows us to manage customer data and cover various aspects of our online marketing. This includes, among other things, the analysis of landing pages and reporting. In the process, cookies are stored on the end device you use and data such as your IP address, your geographical location, the type of browser you use, and the duration of the visit are processed.
The collected information as well as the contents of the website are stored on servers of HubSpot in Ireland. In the course of processing, data may also be transmitted to the USA. In this case, the security of the transmission is secured by EU standard contractual clauses.
The data agreement is made on the basis of your consent given through the cookie banner in accordance with Art. 6 (1) 1 lit. a) GDPR.
For more information on HubSpot, visit https://www.hubspot.de/data-privacy/gdpr.
(4) Hotjar
We use a web analytics tool on the Website provided by Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe ("Hotjar").
Hotjar is a tool for analyzing your user behavior on the website. For this purpose, information about your behavior is collected by placing a cookie on your end device, such as your IP address, screen size, device type, information about the used browser and your location.
From the data processed by Hotjar, it is generally not possible to establish a reference to your person; in particular, Hotjar processes your IP address only in anonymized form. If personal data is nevertheless processed, this is done on the basis of your consent given through the cookie banner in accordance with Art. 6 (1) 1 lit. a) GDPR.
You can disable data processing by Hotjar at https://www.hotjar.com/opt-out.
For more information about Hotjar, please see Hotjar's privacy policy, available at https://www.hotjar.com/privacy.
c) Creating a User Account
In order to be able to book accommodation or to use the website for other communication with an Accommodation Provider, it is necessary to create a user account. In the process, all of your personal data that is required to manage the user account will be requested and processed:
Your full name or your full company name including the person of the authorized representative(s);
Your email address;
Gender if applicable;
Your address (different billing address, if applicable);
Your date of birth.
We process your data solely for the purpose of providing you with a user account to fulfill the platform contract with you pursuant to Art. 6 (1) 1 lit. b) GDPR.
We store your personal data for further inquiries as long as you maintain your registration with myroom24. Your data will be deleted no later than three years after the last log-in to your user account.
d) Alternative registration options
(1) Registration with the cell phone number
We offer you the possibility to register and log in on the website with your cell phone number.
After entering your mobile number, we will send you a SMS to verify yourself. This will process your phone number, which is necessary to create and manage the user account.
Your data will be processed exclusively for the purpose of fulfilling the platform contract with you. The legal basis for this is Art. 6 (1) 1 lit. b) GDPR.
We store your personal data for further inquiries as long as you maintain your registration with myroom24. Your data will be deleted no later than three years after the last log-in to your user account.
(2) Google Sign-In
We offer you the possibility to register and log in on the website with Google Sign-In. Google Sign-In is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
To log in or register, you will be redirected to the Google page, where you can log in with your usage data. This links your Google profile or your Google email address and our service. Through the link, we automatically receive the following data from Google:
First and last name;
E-mail address;
Gender.
We only use this data to complete your user profile, as this data is necessary for our services for identification purposes.
Your data will be processed exclusively for the fulfillment of the platform contract with you. The legal basis for this is Art. 6 (1) lit. b) GDPR.
We store your personal data for further inquiries as long as you maintain the registration with myroom24. Your data will be deleted no later than three years after the last log in to your user account.
For more information about Google Sign-In, please see Google's privacy policy (https://policies.google.com/privacy) and terms of use (https://policies.google.com/terms).
(3) Facebook Login
We offer you the possibility to register and log in on the website with Facebook Login. Facebook Login is a service of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").
To log in or register, you will be redirected to the Facebook page, where you can log in with your usage data. This links your Facebook profile and our service. Through the link, we automatically receive the following data from Facebook:
First and last name;
E-mail address;
Gender;
Your Facebook user ID.
We only use this data to complete your user profile, as this data is necessary for our services for identification purposes.
Your data will be processed exclusively for the fulfillment of the platform contract with you. The legal basis for this is Art. 6 (1) lit. b) GDPR.
We store your personal data for further inquiries as long as you maintain your registration with myroom24. Your data will be deleted no later than three years after the last log-in to your user account.
For more information about Facebook and privacy settings, please refer to Facebook's privacy policy (https://de-de.facebook.com/about/privacy/) and terms of use (https://www.facebook.com/legal/terms).
e) Booking an accommodation
If you have decided to book an accommodation, we will transfer all personal data relevant for the processing of the booking (name, address, email address, telephone number) to the Accommodation Provider.
Your personal data will be processed exclusively for the fulfilling the contract. The legal basis for this is Art. 6 (1) lit. b) GDPR.
Thereby, there is a Joint Responsibility according to Art. 26 GDPR with the respective Accommodation Providers. We have concluded a Joint Responsibility Agreement within the meaning of Art. 26 GDPR with these Accommodation Providers, which shows how the obligations under the GDPR have been distributed between us to ensure that your data and your rights are always fully protected. Where such an Agreement does not exist, we follow the basic distribution of duties according to the GDPR according to which both responsible Parties, myroom24 and the Accommodation Providers, each remain fully obligated. This agreement can be made available to you upon request ([email protected]).
We store your personal data for further bookings as long as you maintain the registration with myroom24. Your data will be deleted no later than three years after the last log in to your user account.
f) Payment
We use Payment Service Providers to process payments for bookings. Depending on the payment method, we forward your personal data to the Payment Service Providers.
The legal basis for the processing of personal data that takes place in this context is Art. 6 (1) 1 lit. b) GDPR, as the processing of your data is necessary for the performance of the contract.
The following payment methods can be used by you:
If you choose Paypal as payment method, your data required for the accommodation booking will be automatically transferred to Paypal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg.
Transmitted ("Paypal"). This were usually the following data:
Name;
Address;
Email address;
Phone number;
IP address.
The data transmitted to Paypal may be transmitted by Paypal to credit agencies for the purpose of identity and credit checks. Paypal may also share your data with third parties insofar as this is necessary for the fulfillment of contractual obligations or the data is to be processed on behalf of Paypal.
The privacy policy of Paypal can be accessed by you at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE.
If you choose Stripe as your payment method, the following data required for the accommodation booking will be shared with Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland ("Stripe"):
Name;
Address;
Account number;
Bank code;
Invoice amount;
Currency;
Transaction number.
Stripe's privacy policy can be accessed by you at https://stripe.com/de/privacy.
We also use the following Platform Provider for payouts:
TransferWise Ltd, 6th Floor, The Tea Building, 56 Shoreditch High Street, London E1 6JJ, United Kingdom ("Wise").
When we use Wise, the following information required for payment is shared with Wise:
Name;
Address;
IBAN;
BIC number;
Value added tax identification number (VAT ID).
Wise's privacy policy can be accessed by you at https://wise.com/de/legal/privacy-policy.
Your personal data will be deleted one year after the payment has been completed.
g) Newsletter registration
As a registered user, you have the option of subscribing to a newsletter by email. We will use the data provided in this context exclusively for the purpose of providing the newsletter service within the scope of your consent granted for this purpose pursuant to Art. 6 (1) 1 lit. a) GDPR.
You can unsubscribe from the newsletter at any time and revoke your consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
You can declare the revocation by clicking on the link contained in every newsletter e-mail or by sending a message to the contact details given in the imprint.
As soon as you have revoked your consent, the data provided will be deleted, provided that there are no other legal retention periods (e.g. tax retention periods) to the contrary.
h) Contacting
If you contact us by email or via the contact form on the website, we store your email address and, if you provide this information, your name and telephone number in order to process your request and contact you.
In any case, we collect, process and use the personal data provided in this way only for the purpose of answering your inquiry and/or providing you with access to the requested information.
Your data will be processed exclusively for the purpose of fulfilling the platform contract with you. The legal basis for this is Art. 6 (1) 1 lit. b) GDPR. As soon as the corresponding purpose of the contact has been achieved, the personal data will be deleted.
2. Disclosure to Third Parties
We use Third Parties to assist us in providing our services. These include:
Payment service providers (e.g. banks)
Communications service providers (e.g., telecommunications service providers)
IT infrastructure as a processor (e.g. IT provider)
Market research
Marketing Services
4. Your rights
You can exercise the following rights at any time:
a) Right of access - Art. 15 GDPR
You have the right at any time to receive from us free of charge information about the data stored about you, its origin, recipients or categories of recipients to whom this data is disclosed, and the purpose of storage.
b) Right of rectification - Art. 16 GDPR
You have the right to request that we correct any inaccurate personal data concerning you.
c) Right to erasure - Art. 17 GDPR
After termination of the contractual relationship, your personal data will be deleted, if applicable, after expiration of the tax and commercial law as well as other statutory retention and limitation periods, unless you have expressly consented to the further use of your data.
Provided that legal retention periods are not affected by this and your data is no longer required for the processing of the contract or your inquiry, you can request the deletion of your data at any time.
d) Right to restriction of processing - Art. 18 GDPR
You have the right to request the restriction of the processing of your data if the relevant requirements under the GDPR are met.
e) Right to data portability - Art. 20 GDPR
If the data processing is based on consent or on the performance of a contract and if it is also carried out using automated processing, you have the right to receive your data in a structured, common and machine-readable format and to transfer it to another data processor.
f) Right to object - Art. 21 GDPR
If the processing is based on an overriding legitimate interest, you have the right to object to the processing of your data. We will then no longer process your data unless we have a legitimate interest in processing your data that outweighs your interests, rights and freedoms.
g) Right of withdrawal - Art. 7 (3) GDPR
If the processing of data is based on consent, you have the right to revoke your consent to the use of your data at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
h) Right of appeal
You have the right to complain to a supervisory authority (e.g.: Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin; https://www.datenschutz-berlin.de/) about the processing of your data.
i) Contact details
For data protection-related concerns, you can contact our data protection officer at any time at [email protected] .