Imprint and Privacy Policy

Imprint

HOMELIKE INTERNET GmbH
Hansaring 97
50670 Cologne, Germany
Email: info@thehomelike.com

Managing Directors: Dustin Figge, Christoph Kasper

Amtsgericht Köln, HRB 83441
USt. ID: DE 298 593 148

Contact our customer service
Phone number: +49 221 988 611 88
Fax number: +49 221 64 30 64 79
(Cologne, Germany)

Homelike privacy policy

The protection and confidentiality of your data is extremely important to Homelike (Homelike Internet GmbH, Hansaring 97, 50670 Cologne).

This privacy policy is intended to provide you with information on how HOMELIKE handles your personal data that we collect, process and use in the context of use of the Internet platform.

Where Homelike collects, processes and uses your personal data as part of the offer, this takes place in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Telemedia Act (Telemediengesetz – TMG).

1. General

Homelike provides its offers via an online platform (jointly referred to as “platform”). We would like to inform you about the use of your personal data and the use of cookies and analysis tools on our platform. Personal data is any data that relates to you personally, e.g. name, address, email addresses, user behaviour. This privacy policy applies to all current and future methods of accessing the platform.

2. Controller and service provider

The controller as defined in Art. 4(7) of the EU General Data Protection Regulation (GDPR) is Homelike Internet GmbH, Hansaring 97, 50670 Cologne, Germany(https://www.thehomelike.com/en/imprint-privacy-policy/info@thehomelike.com.

You can contact our data protection officer at Datenschutz@thehomelike.com or via our postal address, adding “The Data Protection Officer”.

3. Use and disclosure of personal data when making contact

Where you provide us with personal data (e.g. via a contact form), we will use this data only for the purposes of processing contracts concluded with you and for technical administration. We do not pass the personal data provided to us on to third parties unless the disclosure or transmission is necessary for the purposes of implementation or the data is required on account of legal obligations to higher-level authorities.

The same applies to enquiries that we receive from third parties in a business context (potential contractual partners or other third parties).

We also use data for internal purposes for contacting customers and for customer support. The legal basis for this is Art. 6(1)(f) (“legitimate interests”). We have a legitimate interest in maintaining and analysing our customer relationship. This corresponds to our business interests. Your rights as a user are protected because you are either in a contractual relationship with us or are in contact with us for business reasons. Your data is deleted once it is no longer required for the relevant purpose. Enquiries from private persons are usually deleted as soon as they have been responded to. You can object to the processing at any time with future effect.

Legal restrictions on data processing in promotional emails/communication remain unaffected and are observed by us.

4. Processor

Where we use commissioned service providers for individual functions of our offer, we inform you below of the relevant processes.

5. Your rights

You have the following rights with respect to us in relation to the personal data concerning you:

  • Right of access,
  • Right to rectification or erasure,
  • Right to restriction of processing,
  • Right to object to the processing,
  • Right to data portability.

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

6. Collection, processing and use of your personal data

The scope and nature of the collection, processing and use of your personal data varies depending on whether you visit and use our platform only for informative purposes or also use our platform to correspond with us or actively use it as a (potential) tenant or landlord. To use all services offered by Homelike, registration is required, which involves the provision of various personal data.

6.1 Use purely for information purposes

If you visit our website without registering, only aggregated and statistical data about your usage behaviour will be processed (e.g. via Google Analytics or other analysis services, as described below).

In addition, for technical reasons, your web browser automatically transmits data to our web server when you visit our website. This data includes the date and time of access, the URL of the referring website, the file accessed, the volume of data sent, the browser type and version, the operating system and your IP address. This data is stored as log files separately to other data that you provide in the context of use of our website. This data is not linked to a specific person unless we are legally required to do so. IP addresses are deleted automatically after one month.

The legal basis for this is Art. 6(1)(f) GDPR (“legitimate interests”). Homelike uses and processes the personal data to ensure that the service is user-friendly and suited to user requirements and that it is effective and secure, as well as to ensure the optimal arrangement of accommodation and other services.

6.2 Use of services

If you use Homelike services, we collect, obtain, store, process and use a range of personal data that you provide to us, e.g. when:

  • You register on the Homelike platform and thereby create a user profile or update the details in your user account.
  • You save accommodation or place adverts for accommodation, make bookings or confirm booking requests.
  • You link your user account on a third-party website (e.g. LinkedIn) to your Homelike account. If your settings on the third-party website allow and if permitted by you, we receive personal data that you have provided on the third-party website or that you make available to us during the transmission process.

Certain data is required for this purpose. If you do not provide this data, services or parts thereof may not be provided.

6.3 Registration

When you register on Homelike, the following personal data is recorded at a minimum:

  • Your email address
  • For sign-up with LinkedIn, please see the further information under No. 13.

6.4 Offering accommodation

If you use Homelike as a provider of accommodation, i.e. you offer accommodation, to process the entire business transactions we also need the following data from you:

  • Your bank details (account holder, IBAN and BIC); these, however, within the normal booking process only via the service provider “Stripe”. We generally receive no payment data, only truncated identifying features (the last four characters of the IBAN and references to the booking with Stripe).
  • Your complete invoice address incl. VAT ID no. so that we can invoice you for our billable services.

6.5 Booking accommodation

If you actively use Homelike to book accommodation or other services, to process the entire business transactions we also need the following data from you:

Your credit card or bank details (account holder, IBAN and BIC); within the normal booking process, however, only via the service provider “Stripe”. We generally receive no payment data, only truncated identifying features (the last four characters of the IBAN and references to the booking with Stripe).

Your bank or credit card details will not, of course, be passed on to the tenant or provider.

6.6 Other voluntary details/user profile

You can also add additional personal data to your user profile voluntarily, such as your telephone number, work information (employer, position, salary, education, certificates, additional qualifications), photo, date of birth and nationality. When you send a booking request, this data is sent to the accommodation provider to allow the provider to form a better picture of you. Your personal data cannot be seen by other users or the public if you have not actively made a booking request. If you submit a request, the personal data can be seen only by the user offering the accommodation or other services in question via the Homelike platform.

6.7 Transmission between tenant and provider

Your personal contact details (name, email address and, where applicable, telephone number) as the tenant or provider of accommodation is exchanged only once a binding booking has been made.

6.8 Erasure and modification options

You can view, modify and delete your information in your user account at any time. You can also delete your user account. It will then be kept by Homelike for a few months before being completely deleted. Statutory retention periods remain unaffected.

6.9 Legal basis

The legal basis for processing as described in b) to h) above is Art. 6(1)(b) GDPR (“performance of a contract”).

7. Disclosure of data to third parties/processors

Homelike passes your personal data on to third parties only if the transmission is needed to provide the offers or services from Homelike that you want to use or if a contractor that we use to provide the offers or services requires this data. Unless you have been expressly informed otherwise, such parties are entitled to use the data only to the extent required to provide the offer or services.

Data is transmitted to government institutions and authorities entitled to receive such information only within the scope of statutory obligations to provide information or if we are obligated to provide information on account of a court ruling. Under no circumstances will we pass on personal data to third parties for advertising or marketing purposes unless you have expressly agreed to this beforehand.

Landlords/accommodation providers who receive data from (potential) tenants are not entitled to store, use or pass on this data once the contractual relationship has ended. This applies in particular if a booking is not made. In this case, landlords/accommodation providers must delete the data after the request has been declined (this happens automatically as long as the data is not exported from the Homelike system). Any statutory regulations on longer retention periods remain unaffected. A corresponding contractual obligation is imposed on landlords/providers.

8. Cookies

When you visit the portal as a user, we also use cookies. These are small text files that a website like ours can place on the website visitor’s computer, i.e. store locally, and are automatically deleted when you log out and close the browser.

We use cookies to make use of the platform as convenient as possible for you so that, for example, you do not need to fill in the login page again the next time that you visit.

You can disable the storage of cookies in your browser by changing your browser settings to prevent the setting of cookies (“private browsing mode”). You can also delete cookies from your PC hard drive at any time (“Cookies” folder). You can use our website without cookies, but if you do so please note that you may be able to make only limited use of the functionalities on this website.

9. Payment service provider

We also use a payment service provider to implement payment processes. This is

Stripe Payments Europe, Limited, C/O A&L Goodbody,

Ifsc, North Wall Quay, Dublin 1. (www.stripe.com)

With regard to the processing of personal data by the payment service provider, the privacy policies of the payment service provider apply.

Payment data is always stored on the servers of the relevant payment service provider, and is used and processed for transactions.

The legal basis for processing is Art. 6(1)(b) GDPR (“performance of a contract”).

10. Use of third-party services and transmission of data to EU and non-EU countries

Our website also uses Google Analytics services and Facebook features, as well as services from other providers outside the EU. Special cookies are used in this regard. Please note that, in this context, information may also be transferred abroad (EU and outside the EU). For such transfers, the specific data protection notices apply as follows. Please note that we ourselves do not send abroad the data that you knowingly provide in contact forms.

Irrespective of this, data will of course be sent abroad if you send a booking request to a provider abroad.

11. Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses cookies – text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie relating to your use of this website is usually sent to a Google server in the USA and stored there. If IP anonymisation is activated on this website, however, Google will first truncate your IP address within Member States of the European Union or other contracting parties to the Agreement on the European Economic Area. The full IP address will be sent to a Google server in the USA and truncated there only in exceptional cases. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports about the website activities, and to provide other services related to website usage and Internet usage to the website operator. The IP address transmitted by your browser within the context of Google Analytics will not be combined with other data held by Google. You can prevent the storage of cookies by configuring your browser software accordingly. However, please note that if you do this you may be unable to use all functions of this website to their fullest extent. You can also prevent the collection of data generated by the cookie relating to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link (https://tools.google.com/dlpage/gaoptout?hl=en-GB).

IP anonymisation is activated on this website.

The legal basis for the analysis by Google Analytics is legitimate interests pursuant to Art. 6(1)(f) GDPR. We need to analyse our offer in order to evaluate and improve it and ensure that it is appropriately targeted. IP anonymisation ensures that users’ interests are protected.

12. Google Adwords

We use the online advertising program “Google AdWords” and, as part of Google AdWords, conversion tracking. Google conversion tracking is an analysis service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). When you click on an advert placed by Google, a conversion tracking cookie is placed on your computer. These cookies are valid for 30 days.

If you visit certain pages on our website and the cookie has not yet expired, we and Google can detect that you have clicked on the advert and have been forwarded to this page. Each Google AdWords customer receives a different cookie. This means that there is no possibility of cookies being tracked via the websites of AdWords customers.

The information collected using the conversion cookie is used to prepare conversion statistics for AdWords customers that have opted for conversion tracking. Through this, customers learn the total number of users that have clicked on their advert and been forwarded to a page featuring a conversion-tracking tag. However, they do not receive any information that enables users to be identified personally.

This website uses Google remarketing. Adverts may appear in the Google Display Network – based on websites within the “Display Network” which also use Google remarketing and whose content has previously been accessed by visitors. In particular, we use Google remarketing to tailor our adverts to you based on your previous visit to this website – if, for example, you visit other websites that are part of the Google network. You can disable this option by configuring the relevant settings at the following link: http://www.google.com/settings/ads.

If you visit this website while using your Google account and have permitted Google to link your browsing history to your Google account in order to personalise adverts, Google will link information that has been obtained via Google Analytics to your Google account data. Google will use this collected information for cross-platform marketing purposes. This means that the way in which you use this website on a device creates the basis for showing adverts to you on a different device. The data that Google collects about Google account users via this website does not enable Homelike to determine the identity of any Google account users.

If you do not wish to participate in tracking, you can opt out of this and prevent the setting of cookies by configuring the relevant setting in your browser software accordingly (disable option). You will then not be included in the conversion tracking statistics. Further information and the Google privacy policy can be found at: http://www.google.com/policies/technologies/ads/https://policies.google.com/privacy

13. DoubleClick

DoubleClick by Google is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). DoubleClick by Google uses cookies to display adverts that are relevant to you. In this process, a pseudonymous identification number (ID) is assigned to your browser to check which adverts have been displayed in your browser and which adverts have been seen. The cookies contain no personal information. The use of DoubleClick cookies simply enables Google and its partner websites to place adverts based on previous visits to our website or other websites. Google sends the information generated by the cookies to a server in the USA for analysis, and it is stored there. Google transfers the data to third parties only where required by legal regulations or in the context of commissioned data processing. Under no circumstances will Google combine your data with other data collected by Google.

By using our website, you confirm that you agree to the processing of data collected about you by Google and the manner of data processing described above, as well as to the specified purpose. You can prevent the storage of cookies by configuring your browser software accordingly. However, please note that if you do so you may be unable to use all functions of our website to their fullest extent. You can also prevent the collection of data generated by the cookies relating to your use of the website by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link in the DoubleClick opt-out add-on section. Alternatively, you can disable DoubleClick cookies on the Digital Advertising Alliance site at the following link (https://adssettings.google.com/).

14. Google Tag Manager

This website uses Google Tag Manager. Google Tag Manager is a solution that enables marketers to manage website tags (i.e. integrated elements that can trigger a data transfer) via an interface. The Tag Manager tool itself (which implements the tags) is a cookieless domain and records no personal data. The tool enables the deployment of other tags that may collect data in some circumstances. Google Tag Manager does not access this data. If deactivation has been implemented at domain or cookie level, this remains in place for all tracking tags that are implemented using Google Tag Manager.

15. Google Optimize:

The web analysis service provided by Google (“Google Optimize”) is also used. This service uses cookies to identify a visitor’s browser and to analyse use of this site. No personal data is collected or processed during this process.

15.1 Legal basis for Google advertising products

The legal basis for the use of Google advertising products as described in No. 12 to 15 above is Art. 6(1)(f) GDPR. It is necessary for us to monetise our offer – including by collecting and processing user data – in the best possible way, which includes appropriate advertising. We can determine users and target groups using the aforementioned techniques. Your interests are protected because your data is processed only in pseudonymised form.

16. Trustpilot

We use an interface with independent review portal Trustpilot, run by Trustpilot A/S, Pilestræde 58, 5, 1112 Copenhagen, Denmark. We strive to constantly improve our service and, for this reason, have opted to use such a solution. It is therefore also not possible for us individually to manage or influence review invitations. For each booking on Homelike an invitation is generated. This is the only way in which we can ensure a full, independent customer review of our company and our services that cannot be influenced by us as a shop. The data sent to the business app for this purpose (first name, last name, email address and reference number [order number for unique assignment]) is sent to our business app by Trustpilot and is not used by Trustpilot itself or passed on to third parties by Trustpilot. A review of our company can be submitted on the following page: https://de.trustpilot.com/review/stilconceptstore.de. Reviews are always verified based on a reference number (request number) via a specially generated link. It is up to you as a customer whether you leave a review. To submit a review/leave feedback, you need to create/open a user profile with Trustpilot. As well as submitting a review for the company that sent the invitation, you can then also submit reviews for any other company on the Trustpilot review portal. If a review is being submitted without an invitation having been received first, however, a unique reference for the contractual relationship with the company being reviewed is required. Further information on this subject is available from Trustpilot. If a review is submitted by clicking on the link in the invitation, after entering the personal data (usually name and email address for verification purposes), a Trustpilot user profile is created automatically. This involves agreeing to the data protection provisions and general terms and conditions of Trustpilot. These are available on the Trustpilot website at: https://legal.trustpilot.com/end-user-privacy-terms. By creating a user account on our website, you are expressly agreeing to the aforementioned transmission of reference data via an electronic interface to the business app by Trustpilot and to the automatic sending of a review invitation from this application.

The review profile for Homelike can be viewed at: https://www.trustpilot.com/review/www.thehomelike.com

The legal basis for this is Art. 6(1)(f) GDPR (“legitimate interests”). We have a legitimate interest in enabling the review and evaluation of our offers. This is necessary in order to appropriately design and align them for the future. Users’ interests are protected because participation is voluntary and data is deleted if users do not participate. If users actively participate and submit a review, Art. 6(1)(a) (“consent”) also applies.

17. Use of LinkedIn/Facebook social plugins

Our website uses social plugins (“plugins”) from the social network linkedin.com (“LinkedIn”) and the social network facebook.com (“Facebook”). The plugins are labelled with a LinkedIn logo or a Facebook logo.

17.1 LinkedIn

Our website uses the sign-up and login function, as well as social plugins (“plugins”), from the social network “LinkedIn”, which is operated by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. The plugins are labelled with a LinkedIn logo or the text “LinkedIn Social Plugin”.

When you visit a Homelike website that contains such a plugin, your browser establishes a direct connection to the LinkedIn servers. The content of the plugin is sent directly to your browser by LinkedIn, and your browser then integrates this content in the website.

Through the integration of the plugin, LinkedIn receives the information that you have visited the relevant page on our website. If you are logged into LinkedIn, LinkedIn can link the visit to your LinkedIn account. If you interact with the plugins, for example by adding a comment, your browser sends the corresponding information directly to LinkedIn, where it is then stored.

Information on the purpose and scope of the data collection and further processing and use of the data by LinkedIn, as well as your associated rights and options to protect your privacy, can be found in the LinkedIn privacy policy at http://www.linkedin.com/static?key=privacy_policy&trk=hb_ft_priv

If you do not want LinkedIn to collect data about you via our website, you will need to log out of LinkedIn before visiting our site.

The legal basis for the interaction with LinkedIn is the consent you have given to LinkedIn in accordance with Art. 6(1)(a) GDPR.

17.2 Sign-up, Login

We also provide the option of registering with us via the LinkedIn sign-up or logging in via the login. If you wish to register or log in with us via the LinkedIn sign-up or login, you thereby permit us:

  • To access your general data, such as your name, profile picture, gender, user ID, work information and any other data that you have made public in your profile.
  • To access your data even if you are not currently using the application.
  • To access your other profile information, such as your date of birth, home town/city and current place of residence.
  • The LinkedIn sign-up/login is easily identified by the characteristic white text on the blue background.

The legal basis for the interaction with LinkedIn is your consent in accordance with Art. 6(1)(a) GDPR and the performance of a contract for the sign-up in accordance with Art. 6(1)(b) GDPR.

17.3 Remarketing

Homelike uses the remarketing function via the LinkedIn Insight Tag on the website. This function enables Homelike to address website visitors with targeted advertising through the display of personalised, interest-related LinkedIn ads to website users when they visit the social network LinkedIn. To utilise this function, the LinkedIn Insight Tag is implemented on our website. You can opt out via the following link: https://www.linkedin.com/psettings/guest-controls

Via this tag, a direct connection is established with the LinkedIn servers when you visit the website. Via this connection the LinkedIn servers will be notified of which of our pages you have visited. LinkedIn links this information to your personal LinkedIn user account. Further information on the collection and use of data by LinkedIn, as well as your associated rights and options to protect your privacy, can be found in the LinkedIn privacy policy at https://www.linkedin.com/legal/privacy-policy. You can opt out via the following link: https://www.linkedin.com/psettings/guest-controls

The legal basis for this is Art. 6(1)(f) GDPR. It is necessary for us to monetise our offer – including by collecting and processing user data – in the best possible way, which includes appropriate advertising. We are able to determine users and target groups using the aforementioned technique. Your interests are protected because your data is processed only in pseudonymised form.

18. Facebook / Integration and Remarketing

Our website uses social plugins (“plugins”) across the entire site, including plugins from social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins are labelled with a Facebook logo. When you visit a web page from our online directory that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is sent directly to your browser by Facebook, and your browser then integrates this content into the website. Through the integration of the plugin, Facebook receives the information that you have visited the relevant page of our online directory. If you are logged into Facebook when you visit our site, Facebook can link the visit to your Facebook account. If you interact with the plugins, for example by clicking the “Like” button or adding a comment, your browser sends the corresponding information directly to Facebook, where it is then stored. Information on the purpose and scope of the data collection and further processing and use of the data by Facebook, as well as your associated rights and configuration options to protect your privacy, can be found in the current Facebook privacy policy: https://www.facebook.com/policy.php

If you do not want providers to link the data collected via our website directly to your profile in the relevant social network, you will need to log out of the network in question before visiting our website.

The legal basis for the interaction with Facebook is the consent you have given to Facebook in accordance with Art. 6(1)(a) GDPR.

Homelike uses the “Custom Audiences” remarketing function provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) on the website. This function enables Homelike to address website visitors with targeted advertising through the display of personalised, interest-related Facebook ads to website users when they visit the social network Facebook. To utilise this function, the Facebook Remarketing Tag is implemented on our website.

Via this tag, a direct connection is established with the Facebook servers when you visit the website. The information about which of our pages you have visited is then sent to the Facebook servers via this connection. Facebook links this information to your personal Facebook user account. Further information on the collection and use of data by Facebook, as well as your associated rights and options to protect your privacy, can be found in the Facebook privacy policy at https://www.facebook.com/about/privacy. If you do not want Facebook to link the collected information directly to your Facebook user account, you can disable the “Custom Audiences” remarketing function here (https://www.facebook.com/settings/?tab=ads#_=_). You need to be logged into Facebook to do this.

The legal basis for this is Art. 6(1)(f) GDPR. It is necessary for us to monetise our offer – including by collecting and processing user data – in the best possible way, which includes appropriate advertising. We are able to determine users and target groups using the aforementioned technique. Your interests are protected because your data is processed only in pseudonymised form.

19. Lease – Hello Sign

When booking accommodation on Homelike, leases can be signed online using a digital signature. For some accommodation on the Homelike portal, this is necessary to create a binding booking. For this purpose, we use the API (application programming interface) of www.HelloSign.com.

Hello Sign is operated by JN PROJECTS INC, 944 Market Street, Suite 400, San Francisco, CA 94102, USA.

Further information on data protection in relation to Hello Sign is available directly from Hello Sign: https://www.hellosign.com/info/privacyPolicy

Hello Sign is registered under the Privacy Shield and acts as a processor for Homelike.

The legal basis for this is Art. 6(1)(b) GDPR (“performance of a contract”).

20. Bing Ads

On our website, Bing Ads technology is used to collect and store data, from which usage profiles are then created using pseudonyms. This is a service provided by the Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This service enables us to track the activities of users on our website if these users have reached our website via Bing Ads adverts. If you reach our website via such an advert, a cookie is set on your computer. A Bing UET tag is integrated on our website. This involves a code via which, in conjunction with the cookie, some non-personal data relating to the use of the website is stored. This includes, among other things, the time spent on the website, which areas of the website are visited, and the advert via which the user reached the website. Information on your identity is not collected.

The information collected is sent to a Microsoft server in the USA and generally stored there for a maximum of 180 days. You can prevent the collection of data generated by the cookie relating to your use of the website and the processing of this data by disabling cookies. This may limit the functionality of the website in some cases.

In some circumstances, Microsoft may also track your usage behaviour across more than one of your electronic devices using cross-device tracking and is thereby able to display personalised adverts on Microsoft websites and in Microsoft apps. You can disable this at: http://choice.microsoft.com/opt-out.

Further information on the analysis services provided by Bing can be found on the Bing Ads website (https://help.bingads.microsoft.com/#apex/3/en/53056/2). Further information on data protection at Microsoft and Bing is available in the Microsoft privacy statement (https://privacy.microsoft.com/en-GB/privacystatement).

The legal basis for this is Art. 6(1)(f) GDPR. It is necessary for us to monetise our offer – including by collecting and processing user data – in the best possible way, which includes appropriate advertising. We are able to determine users and target groups using the aforementioned technique. Your interests are protected because your data is processed only in pseudonymised form.

21. MouseStats

We are constantly developing our website further and occasionally use a web service provided by MouseStats, 1 Research Drive, Dartmouth, B2Y 4M9, Canada. With this service, mouse movements, mouse clicks, scrolling movements and key presses on the site are recorded. Input in personal fields in the contact form is not recorded.

As is usually the case when integrating external resources, your IP address is sent to the third-party provider. However, we can view IP addresses only in anonymised form, so we are not able to identify you. You have the option of preventing the data from being collected in the first place via this link: https://www.mousestats.com/optout. Further information on data protection is available here:

https://www.mousestats.com/sales/privacy.

The legal basis for this is Art. 6(1)(f) GDPR. It is necessary for us to analyse and subsequently monetise our offer in the best possible way – including by collecting and processing user data relating to behaviour on our sites. We are able to analyse user behaviour using the aforementioned technique. Your interests are protected because your data is processed only in pseudonymised form.

22. Hotjar

On some websites, Homelike uses the web analysis service Hotjar provided by Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, tel.: +1 (855) 464-6788).

This tool enables movements on the websites on which Hotjar is used to be tracked (heatmaps). For example, it is possible to determine how far down users scroll and which buttons are clicked and how often. Using the tool, it is also possible to obtain feedback directly from website users. In this way, we receive valuable information that enables us to make our websites even faster and more user-friendly.

Homelike pays particular attention to the protection of your personal data when using this tool. This means that we are only able to track which buttons are clicked, the movement of the mouse, how far down is scrolled, the screen size of the device, the device type and browser information, the geographic location (only the country) and the preferred language for displaying our website. Areas of the websites in which your personal data or the personal data of third parties is displayed are automatically hidden by Hotjar and can therefore never be tracked.

Hotjar offers all users the option to prohibit the use of the Hotjar tool with the Do Not Track header, so that no data relating to the visit to the website concerned is recorded. This setting is supported by all commonly used browsers in their current versions. To configure this setting, your browser sends a request to Hotjar to disable tracking of the relevant user. If you use sipgate websites with different browsers/computers, you will need to set the Do Not Track header separately for each of these browsers/computers.

A detailed guide with information on your browser is available at:

https://www.hotjar.com/opt-out

Further information about Hotjar Ltd. and the Hotjar tool is available at:

https://www.hotjar.com

The Hotjar Ltd. privacy policy is available at:

https://www.hotjar.com/privacy

The legal basis for this is Art. 6(1)(f) GDPR. It is necessary for us to analyse and subsequently monetise our offer in the best-possible way – including by collecting and processing user data relating to behaviour on our sites. We are able to analyse user behaviour using the aforementioned technique. Your interests are protected because your data is processed only in pseudonymised form.

23. Salesforce

In Customer Relations, we use products from Salesforce.com Germany GmbH, Erika-Mann-Str. 63, 80636 Munich, Germany (“Salesforce”) – particularly for customer service. Salesforce collects data from customer enquires for us, processes this data and then forwards it on to us as necessary. Information on the data processing carried out by Salesforce can be found in the Salesforce privacy policy at https://www.salesforce.com/company/privacy/

and http://www.salesforce.com/de/company/updated_privacy.jsp

and the data processing addendum

https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/data-processing-addendum.pdf

23.1 Salesforce Marketing Cloud

To optimise our marketing activities, we use the Marketing Cloud provided by salesforce.com EMEA Limited, village 9, floor 26 Salesforce Tower, 110 Bishopsgate, London EC2N 4AY, United Kingdom. In this context, data (activity data ensuing from emails about our online channels, e.g. data on the page accessed, the site path, the device used, the approximate location and data on the pseudonymised identification of the user profile) is collected from you and stored and used to tailor our offer (products, website, newsletter) to you. Because Salesforce is an international company headquartered in the USA, the possibility that your data will be transmitted to the USA cannot be excluded. Salesforce is listed under the EU-U.S. Privacy Shield and thus guarantees that your data will also be given an appropriate level of protection in the USA. By using our website, you consent to this use of your data.

The legal basis for this is Art. 6(1)(f) GDPR. It is necessary for us to analyse and subsequently monetise our offer in the best-possible way. We are able to address users using the aforementioned technique.

24. Intercom

On our website, we use a live-chat tool provided by Intercom, 55 2nd Street,
4th Floor, San Francisco, CA 94105 to communicate with customers.

As is usually the case when integrating external resources, your IP address is sent to the third-party provider. Users also have the option of entering their email address or telephone number in the chat tool, which we pass on to Intercom accordingly, so that communication can be continued via this method. Intercom also tracks other user data for statistical purposes. Further information on the data that Intercom collects is available on the website: https://www.intercom.com/terms-and-policies

Because Intercom is an international company headquartered in the USA, the possibility that your data will be transmitted to the USA cannot be excluded. Intercom is listed under the EU-U.S. Privacy Shield and thus guarantees that your data will also be given an appropriate level of protection in the USA.

The legal basis is performance of a contract in accordance with Art. 6(1)(b) GDPR.

25. Meero

On our website, we offer our landlords a photo service provided by Meero, 28 rue d’Hauteville, 75010 Paris.

To arrange a date for a photo session, personal data in the form of the landlord’s name and telephone number is passed on to Meero or Meero’s photographer. Further information on the data that is collected is available on the website: https://www.meero.com/en/legal-notices

The legal basis is performance of a contract in accordance with Art. 6(1)(b) GDPR.

26. Ogulo

On our website, for some apartments we offer 360° tours through the apartment. These tours are hosted on the servers of Ogulo GmbH, Europa-Center, Tauentzienstr. 9-12, 10789 Berlin and integrated on Homelike via an Iframe. When a user actively opens one of these tours, Ogulo collects various user-related data. A precise list of the data collected can be found on the website: https://ogulo.de/datenschutz.html

The legal basis is performance of a contract in accordance with Art. 6(1)(b) GDPR.

27. Mandrill

Homelike uses the Mandrill tool provided by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA to send transaction emails. To ensure that emails are sent, the email addresses of users are passed on to the service provider. Personal data is also sent in the emails that are sent via the service provider. The email content is stored on the service provider’s servers. Because The Rocket Science Group is an international company headquartered in the USA, the possibility that your data will be transmitted to the USA cannot be excluded. The Rocket Science Group is listed under the EU-U.S. Privacy Shield and thus guarantees that your data will also be given an appropriate level of protection in the USA.

The legal basis is performance of a contract in accordance with Art. 6(1)(b) GDPR (sending necessary user communication) and Art. 6(1)(a) GDPR (“consent”) for newsletters.

28. Mixpanel

To understand how our customers use our offer and to continuously improve our offer, we use the tracking tool of www.mixpanel.com, a web analysis service provided by Mixpanel Inc. Cookies may be used for this purpose. These are small text files that are stored locally on the website visitor’s computer and thus enable the website visitor to be recognised the next time that he or she visits our website. Mixpanel Inc. collects and stores usage data in pseudonymous profiles. The pseudonymous usage profiles are not combined with personal data concerning the bearer of the pseudonym. You can opt out of the data collection and storage carried out for web analysis purposes at any time with future effect by disabling the service by clicking on “Yes, I would like to opt out” on this site: https://mixpanel.com/optout/. Please note that if you do this, a cookie is placed on your end device that ensures that no further data is collected from you or analysed. You should therefore not delete this cookie. Furthermore, we use Mixpanel to send you targeted push notifications if you have given your consent to this. If you no longer wish to receive notifications, you can disable these in the app at any time. You can view the Mixpanel privacy policy here: https://mixpanel.com/terms.

The legal basis for this is Art. 6(1)(f) GDPR. It is necessary for us to analyse and subsequently monetise our offer in the best possible way. We are able to address users using the aforementioned technique.

29. Criteo

Through a technology of Criteo SA (Rue Blanche, 75009, Paris, France), anonymous information about the surfing and user behavior of website visitors on our websites is collected and stored. Cookies are used on the visitor’s computer for this purpose. Using an algorithm, Criteo SA analyses the anonymously recorded surfing behavior and can then display targeted product recommendations as personalized advertising banners on other publisher websites. Under no circumstances can this data be used to personally identify you as a visitor to our website. The data collected will be used to improve the offer. This information is not passed on to third parties. Of course, you can object to the anonymous analysis of your surfing behavior on our websites. You can unsubscribe here at Criteo SA . If you have already unsubscribed (opt-out cookie) and would like to receive personalized Criteo SA banners again, please re-register under the same link.

When you opt-out, a new cookie (Opt-Out-Cookie) is placed in your web browser that tells Criteo SA to cease data collection from and ad delivery to your browser. You can opt-in to Criteo SA’s ads again at any time by switching the controller to “ON”. Please be aware that this configuration will be necessary for each of your browsers. In case all of your cookies in a browser are deleted, also the Opt-Out-Cookie of Criteo SA will be affected.

For more information on the technology used, please refer to Criteo SA’s privacy policy.

The legal basis for this processing is the legitimate interests pursuant to Art. 6(1)(f) GDPR. It is necessary that we analyse our offer in order to be able to advertise it accordingly. Both Criteo and we have a legitimate interest as providers of such advertising opportunities, or in optimizing our offers. As users are not personally identified, their interests are protected.

30. Homelike Newsletter & Marketing Emails

With the following information we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure and your rights of objection. By subscribing to our newsletters, you agree to receive the newsletter and to the described procedures.

 

Content of the newsletter: We send newsletters, e-mails and other electronic notifications containing advertising information (hereinafter “newsletters”) only with the consent of the recipients or a legal permission. We distinguish between four types of newsletters with the following content:

 

  • Standard Newsletter: Information about our services and us
  • Transaction-related emails: e.g. new apartment suggestions for tenants after cancellation by the landlord, for this purpose we evaluate whether a transaction was successfully completed and in which status the transaction is.
  • Informative emails: e.g. restaurant tips and other personal recommendations for tenants (partly after evaluation of search queries and transactions)
  • Marketing emails: e.g. vouchers or other offers for tenants and landlords as well as exclusive additional offers for the rental relationship

 

Furthermore, all our newsletters contain information about our services and us.

 

Double opt-in and logging: Subscription to our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can sign-up with other e-mail addresses than his/her own. Subscriptions to the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes the storage of the login and confirmation time, as well as the IP address. The changes to your data stored with the email delivery service provider are also logged.

 

Credentials: To subscribe to the newsletter, simply enter your e-mail address. Optionally, we ask you to enter a name in the newsletter in order to address you personally.

 

The mailing of the newsletter and the performance measurement associated with it are based on the recipient’s consent pursuant to Art. 6 para. 1 lit. a, Art. 7 GDPR in conjunction with § 7 para. 2 no. 3 Act Against Unfair Competition (UWG) or, if consent is not required, on the basis of our legitimate interests in direct marketing pursuant to Art. 6 para. 1 lt. f. GDPR in conjunction with Section 7 para. 3 Act Against Unfair Competition (UWG).

 

The registration procedure is recorded on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR. This also applies to the evaluation of transactions for individualized communication with the user. We are interested in the use of a user-friendly and secure newsletter system with interesting and relevant content for the user, which serves our business interests as well as the expectations of the users and also allows us to provide proof of consent.

 

Cancellation/Revocation – You can cancel your subscription to our newsletter at any time, i.e. revoke your consent. You will find a link to unsubscribe at the end of each newsletter. We may store the e-mail addresses we have unsubscribed for up to three years on the basis of our legitimate interests before we delete them in order to be able to prove a previously given consent. The processing of these data is limited to the purpose of a possible defence against claims. An individual application for cancellation is possible at any time, provided that at the same time the former existence of a consent is confirmed.

 

The newsletter will be sent out by the email delivery service provider Salesforce Marketing Cloud of salesforce.com EMEA Limited, village 9, floor 26 Salesforce Tower, 110 Bishopsgate, London EC2N 4AY, United Kingdom. Salesforce collects data from customer inquiries, processes them, and forwards them to us if necessary. Please refer to Salesforce’s Privacy Policy at http://www.salesforce.com/de/company/privacy.jsp and http://www.salesforce.com/de/company/updated_privacy.jsp and the Order Processing Agreement https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/data-processing-addendum.pdf for more details. Since Salesforce is an international company headquartered in the United States, we cannot guarantee that your information will not be transferred to the United States. Salesforce is listed under the EU-US Privacy Shield and guarantees that your data will also be adequately protected in the USA.

 

The email delivery service provider will be charged on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f. GDPR and an order processing contract pursuant to Art. 28 para. 3 sentence 1 GDPR.

 

Newsletter – Measuring success: The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use an email delivery service provider, from its server. Within the scope of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval are collected.

 

This information is used to technically improve the services based on the technical data or the target groups and their reading behaviour and based on their retrieval locations (which can be determined using the IP address) or access times. The statistical data collection also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our endeavour, nor, if used, that of the email delivery service provider, to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our contents to them or to send different contents according to the interests of our users.

 

A separate revocation of the success measurement is unfortunately not possible, in this case the entire newsletter subscription must be cancelled.

 

31. Security of your data

We take appropriate technical and organisational measures to protect the data that you provide, in particular to protect the data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons.

32. Update of this privacy policy

We will update this privacy policy from time to time as necessary.