1 Subject of this data protection declaration
The protection of your personal data (hereinafter referred to as “data”) is a major and very important concern for us. In the following, we would therefore like to inform you in detail about the data we collect and how we process or use it, as well as about the accompanying protective measures we have also taken in technical and organisational terms.
2 Name and contact details of the person responsible
The responsible person according to Art. 4 No. 7 DSGVO and service provider according to § 13 TMG is
pbi Architects Ltd.
Stephanikirchhof 7 A
Phone 0421 . 62 65 88 88
fax 0421 . 62 65 88 80
3. contact details of the data protection officer
You can contact our data protection officer at firstname.lastname@example.org or at our postal address with the addition “Attn: Data Protection Officer”.
4. purposes and legal basis of the processing of your data as well as storage period
All personal data that we collect from you will only be collected, processed and used for the stated purpose. In doing so, we ensure that this only takes place within the framework of the applicable legal provisions or otherwise only with your consent.
The extent and type of processing of your data differs according to whether you visit our website merely to retrieve information or make use of services offered by us:
a) Internet use
For the purely informational use of our website, it is generally not necessary for you to provide personal data. Rather, in this case we only collect and use the data that your internet browser automatically transmits to us. This information is temporarily stored in a so-called log file and may possibly allow identification. The following information is collected without your intervention and stored until it is automatically deleted:
Date and time of accessing one of our Internet pages
your browser type
the browser settings
the operating system used
the last page you visited
the amount of data transferred and the access status (file transferred, file not found etc.) as well as
your IP address.
We collect and process this data for the purpose of enabling you to use the Internet pages you have accessed and to improve our Internet offering. Furthermore, we process the data for the purpose of ensuring system security and stability, including the defence against and analysis of attacks on our Internet pages.
We store the IP address for a period of 10 weeks and only for the aforementioned purposes; after this period, the data is deleted or only stored in anonymised form. An evaluation for statistical purposes takes place at most in anonymised form. This data is not merged with other data sources.
The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f DSGVO. The legitimate interest results from the listed purposes.
b) Use of offers or data usage for the fulfilment of tasks
If you wish to make use of services offered by us, it is necessary that you provide us with the personal data required for this purpose. This is the data that is required for the respective processing and handling of your enquiry. You may provide further information voluntarily; we have marked this information as optional.
Your data will be processed for the purpose of handling your enquiry and providing the services you have requested. The legal basis for data processing is Art. 6 para. 1 lit. b DSGVO, insofar as it concerns the initiation and, if applicable, execution of a contract. Otherwise, the legal basis is Art. 6 para. 1 lit. f DSGVO; our legitimate interest lies in answering and processing your enquiry, for which the stored data is necessary.
As a rule, your data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected, i.e. your enquiry has been processed or the service you requested has been fully provided. Beyond this, data is only stored if this is necessary to comply with legal obligations, in particular retention obligations (e.g. from tax law, e.g. in accordance with § 147 AO) in accordance with Art. 6 Para. 1 lit. c DSGVO or for the assertion, exercise and defence of possible legal claims in connection with our services within the applicable limitation periods (e.g. in accordance with §§ 195 ff. BGB) or if you have given us your consent for this in accordance with Art. 6 Para. 1 lit. a, Art. 7 DSGVO.
c) Processing for advertising and marketing purposes
In addition to the processing of the services requested by you, we offer – of course only if you have explicitly consented to this in a separate place – an Internet presence geared to your interests as well as the possibility that we send you occasional news from our company and information on current topics, projects or events by post or e-mail (in the form of our newsletter, cf. point 4. d) of this information below). In addition, we process your personal data for market research purposes, provided you have given your consent to this separately. For these purposes, it is necessary for us to summarise your accrued and provided data in user profiles and to evaluate these for the aforementioned purposes. Such aggregation and evaluation of your data will only be carried out for the aforementioned purposes and only to the extent permitted by your consent.
The legal basis for processing on the basis of your consent is Art. 6 Para. 1 lit. a DSG- VO. You have the right to revoke your data protection consent at any time for the future. To do so, you can either send us an informal e-mail to email@example.com or contact us by post using our contact details above. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
Your data will be deleted as soon as it is no longer required to achieve the aforementioned purposes or you have revoked your consent. Your data will generally be stored and processed for market research purposes for a period of 6 months; your data will be stored and processed for the purpose of sending you information material for as long as you have not revoked your consent or informed us of your express wish not to receive any further information from us.
d) Sending newsletters
On our website you can register for our newsletter. In order to be able to register for our e-mail newsletter service, we require – in addition to your declaration of consent under data protection law – at least your e-mail address to which the newsletter is to be sent. Any further information is voluntary and will only be used for the purpose of addressing you personally and tailoring the content of the newsletter to your interests, as well as to clarify any queries regarding the e-mail address.
For sending the newsletter, we generally use the so-called double opt-in procedure, i.e. we will only send you the newsletter if you first confirm your registration via a confirmation e-mail sent to you for this purpose using the link contained therein. In this way, we want to ensure that only you, as the owner of the e-mail address provided, can register for the newsletter. Your confirmation in this regard must be made promptly after receipt of the confirmation e-mail, otherwise your newsletter registration will be automatically deleted from our database.
The legal basis for processing on the basis of your consent is Art. 6 Para. 1 lit. a DSG- VO. You can revoke your declaration of consent under data protection law at any time for the future or unsubscribe from the newsletter you have subscribed to at any time. To do so, you can either send us an informal e-mail to firstname.lastname@example.org or unsubscribe via the corresponding link at the end of each newsletter. The revocation of consent or unsubscription does not affect the lawfulness of the processing carried out on the basis of consent up to the revocation or unsubscription.
Your e-mail address and, if applicable, any other data voluntarily provided by you as part of your newsletter registration will therefore be stored for as long as you have not revoked your consent or unsubscribed from our newsletter.
5 Recipients of the data
For the aforementioned purpose, your data may be passed on to service providers who support us and whom we have of course carefully selected and obliged to comply with data protection law. These may be, in particular, technical service providers or shipping service providers (e.g. lettershop etc.). Your data will only be passed on to other third parties if this is necessary to fulfil a legal obligation in accordance with Art. 6 Para. 1 lit. c DSGVO or if we have received your explicit consent for this in accordance with Art. 6 Para. 1 lit. a DSGVO.
We use so-called cookies on our Internet pages. Cookies are small text files that are sent from our web server to your browser during your visit to our website and are stored on your computer for later retrieval.
The cookies we use can be divided into the following types:
Session cookies store a so-called session ID, with which various requests from your browser can be assigned to the common session. This enables your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close the browser.
Permanent cookies store a file on your computer for a period of time. These cookies allow websites to remember your information and settings the next time you visit. This results in faster and more convenient access, as you do not have to set your language preferences for our portal again, for example. Permanent cookies are automatically deleted after a predefined period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
Third-party cookies originate from providers other than us as the operator of the website (e.g. Google, see section 7 of this privacy notice below). They can be used, for example, to collect information for advertising, customised content and web statistics.
We use the following cookies:
You can determine yourself whether cookies can be set and retrieved by means of the settings in your browser. You can, for example, completely deactivate the storage of cookies in your browser, restrict it to certain websites or configure your browser so that it automatically informs you as soon as a cookie is to be set and asks you for feedback. You can find out how this works in detail in the help function of your browser or for the most common browsers under the following links:
Name of the cookie
Type of cookies
Microsoft Internet Explorer Google Chrome
Apple Safari 6/7
Please note that a general deactivation of cookies may lead to functional limitations of our website. For technical reasons, it is necessary to allow at least the above-mentioned session cookies in order to ensure the full functionality of our website.
7 Use of statistical tools (Google Analytics)
It is important to us to design our Internet pages as optimally as possible and thus to make them attractive for our visitors. To do this, it is necessary for us to know which parts of it are received by our visitors and how.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link:
In order to prevent the collection of data by Universal Analytics across different devices, you must carry out the opt-out on all systems used.
Google is certified under the so-called EU-US Privacy Shield (“EU-US Privacy Shield”). The EU-US Privacy Shield Agreement is a data protection agreement that is intended to ensure an adequate level of data protection for data transfers to certified US companies. The EU Commission determined the adequacy of the guaranteed level of data protection under the EU-US Privacy Shield Agreement in its decision of 12 July 2016 (Case C(2016) 4176). You can view the decision of the EU Commission here:
The current status of Google’s certification under the EU-US Privacy Shield agreement can be found here:
Your data generated by Google Analytics will be deleted after 14 months.
8. data security
We have taken technical and organisational security measures to protect personal data collected on our website, in particular against accidental or intentional manipulation, loss, destruction or against attack by unauthorised persons. Our security measures are continuously improved in line with technological developments.
Insofar as we provide you with various online forms and services with which you can send personal data to us, these forms are protected against inspection by third parties by the use of TLS encryption. Depending on the service, you may also be asked to identify yourself or prevent misuse when making various entries:
a) For identification purposes when submitting data, you may be asked to enter a user-defined identifier or other suitable authentication. The data will be protected against third-party access via SFTP or HTTPS, provided that the user uses the methods of data transmission recommended by us.
b) To prevent use by machines, so-called CAPTCHAS can be used, which contain images or tasks that cannot be processed by computer scripts.
9. data subject rights
According to the applicable laws, you have various rights in connection with the processing of your personal data.
If you wish to exercise these rights, please send your request by e-mail or by post, clearly identifying yourself, to the e-mail or postal address given in section 2 of this privacy notice. Below you will find an overview of your rights:
a) Right to information
You have the right to obtain information from us at any time as to whether personal data relating to you is being processed. If this is the case, you have the right to request information from us about the personal data stored about you and the information listed in Art. 15 (1) and (2) DSGVO in connection with the processing of your data. Within the scope of your right to information, you have the right to request a copy of your personal data under the conditions of Article 15 (3) of the GDPR. The first copy is free of charge for you; an appropriate fee may be charged for further copies. Pursuant to Article 15 (4) of the GDPR, the provision of a copy is subject to the rights and freedoms of other persons who may be affected by the transmission of the data copy. In addition, the restrictions on your right to information pursuant to Section 34 BDSG must be observed.
b) Right to rectification
Pursuant to Art. 16 DSGVO, you may immediately request the correction of incorrect or incomplete personal data stored by us.
c) Right to deletion (“right to be forgotten”)
Under the conditions of Art. 17 DSGVO, you have the right to demand that we delete personal data relating to you without delay. According to Art. 17 (1) DSGVO, you have the right to erasure, among other things, if
the personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
you have withdrawn your consent on which we based the processing pursuant to Art. 6 (1) a DSGVO and there is no other legal basis for the processing,
you have objected to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or insofar as you have
have objected to the processing for direct marketing purposes pursuant to Art. 21 (2) DSGVO,
your personal data have been processed unlawfully.
The right to erasure is subject to certain restrictions according to Art. 17 (3) DSGVO, § 35 BDSG. According to these, the right to erasure does not exist, among other things, insofar as the processing is necessary for the assertion, exercise or defence of legal claims or for the fulfilment of a legal obligation which requires the processing under the law of the Union or the Member States to which the controller is subject.
d) Right to restriction of processing
Under the conditions of Art. 18 (1) DSGVO, you have the right to demand that we restrict processing. If the processing of personal data relating to you has been restricted, this data may – apart from being stored – only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.
e) Right to data portability
Subject to the conditions of Article 20 of the GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us.
When exercising your right to data portability, you have the right to request that we transfer your personal data directly to another controller where this is technically feasible.
The right to data portability is subject to the restrictions of Art. 20 (3) and (4) DSGVO.
f) Revocation of consent
Pursuant to Art. 7 (3) DSGVO, you are entitled to revoke the consent you have given to us at any time. This also applies to data protection consents that you gave us before the DSGVO came into force. The revocation has the consequence that we may no longer continue the data processing based on this consent in the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
g) Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO. We will then no longer process this data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (Art. 21 DSGVO).
If your personal data is processed by us for direct marketing purposes, you have the unrestricted right to object at any time to the processing of your personal data for these purposes; this also applies to profiling, insofar as it is related to such direct marketing. Profiling means the use of personal data to analyse or predict certain personal aspects (e.g. interests).
10. right to complain to a supervisory authority
You have the right to lodge a complaint with a supervisory authority, irrespective of any other administrative or judicial remedy, if you consider that the processing of personal data concerning you by us infringes the GDPR, Article 77 GDPR. You may exercise this right before a supervisory authority in the Member State of your residence, workplace or the place of the alleged infringement. The contact details of the supervisory authorities in Germany can be found at https://www.bfdi.bund.de/DE/Infothek/Anschriften links/addresses links-node.html.
Please note that for architectural firms the “supervisory authorities for the non-public sector” are relevant.
Federal Chamber of Architects Status: 27.8.2018