andreas schneider architekten GmbH & Co. KG
Protecting your personal data (referred to hereinafter in short as ‘data’) is a great and very important concern for us. We would therefore like to inform you in detail below about which data we collect and how we subsequently process or use these data, and about which protective measures we have implemented in support of that, also at the technical and organisational level.
Data controller/Service provider
The data controller within the meaning of Article 4 GDPR and at the same time the service provider within the meaning of the Telemedia Act (TMG) is andreas schneider architekten GmbH & Co. KG (see Legal Notes).
Collection and use of your data
Any personal data that we collect from you will only be collected, processed and used for the specified purpose. We ensure that this is only done in accordance with the applicable legal provisions, or otherwise only with your consent. According to Article 21 GDPR, you have the right to object to the processing of your data in the cases specified therein. Please contact us by sending an email to firstname.lastname@example.org, or send us your request by post.
You have the right to complain to the competent supervisory authority for data protection:
Die Landesbeauftragte für Datenschutz und Informationsfreiheit
Tel.: +49 421 3612010 or +49 471 5962010
Fax: +49 421 49618495
The extent to which and the way in which your data are collected and used will differ depending on whether you are visiting our website solely to retrieve information, or to make use of services we offer:
a) Use of the Internet
There is basically no need for you to provide personal data if you are using our website for informational purposes only.
In this case, we collect and use only such data that your browser automatically transmits to us, such as::
the date and time of access to one of our web pages;
your browser type;
the browser settings;
the operating system used;
the last page you visited;
the volume of data transferred and the access status (file transferred, file not found, etc.); and
your IP address.
When you visit the website for informational purposes, we collect and use these data in non-personalised form only. This is done to enable you to use the requested web pages, for statistical purposes and to improve our website. We store the IP address only for the duration of your visit; no data relating to your person is subjected to analysis. These data are not combined with other data sources; they are also erased after they have been statistically analysed. This is permissible, according to the European Court of Justice judgment of 19/10/2016 (case no. C 582/14), also with regard to the Telemedia Act.
b) Availment of offers and use of data to discharge responsibilities
If you wish to avail of services we offer, it may be necessary that you provide further data for that purpose. These are the data that are needed to carry out the respective task. Any further information can be provided on a voluntary basis. The purpose of collecting or using your data is to provide the essential service you wanted.
Your data may be passed on for the aforementioned purpose to service providers that assist us, whom we have carefully selected, of course, and have committed to compliance with data protection law. These may be technical service providers or shipping service providers (lettershop, etc.), in particular.
Your data will otherwise be passed on to other third parties only if this is permitted by law or we have received your explicit consent to do so.
Consent under data protection law
In addition to providing the services requested by you, we would also like to provide you with a website tailored to your specific interests, but only if you have given your explicit and separate consent.
We may also require your consent to publish visual material of which you are the copyright holder, on in which you are depicted. You can provide this consent separately and may withdraw it later at any time with effect for the future.
Right of withdrawal and right to object
We draw your attention to the fact that you can withdraw any consent granted to us under data protection law at any time with effect for the future. If there are legal requirements to collect data (e.g. to compile a list of architects), there is no right of withdrawal.
We also implement security measures of a technical and organisational nature in order to protect any personal data we receive or collect, in particular against accidental or deliberate manipulation, loss, destruction or against attacks by unauthorised persons. Our security measures are continuously improved in accordance with technological advancements.
Time limits for erasing data
We store personal data only until the purpose of storing the data no longer applies, provided there are no statutory retention periods or statutory periods of limitation that prevent the data being erased because they may be needed to take legal action (in this case, processing of the data is restricted pursuant to Article 18 GDPR).
Rights of the data subject
Under the applicable laws, you have various rights in respect of your personal data. If you wish to exercise these rights, please send your request by email or by post, clearly identifying yourself, to the address of the data controller as provided above.
An overview of your rights is provided below.
a) Right to confirmation and information
You have the right to obtain confirmation from us at any time about whether personal data concerning you are being processed by us. If this is the case, you have the right to obtain information from us, free of charge, about the personal data stored about you, together with a copy of these data.
There is also a right to the following information:
the purposes of processing;
the categories of personal data being processed;
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
if possible, the planned duration for which the personal data will be stored, or, if that is not possible, the criteria used to determine that duration;
the existence of the right to request rectification or erasure of your personal data, or restriction of processing by the data controller, or to object to such processing;
the existence of the right to lodge a complaint with a supervisory authority;
if the personal data were not collected from you, all available information about the source from which the data originate;
the existence of automated decision-making, including profiling within the meaning of Article 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
If personal data are transferred to a third country or to an international organisation, you have the right to be informed about the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.
b) Right to rectification
You have the right to insist that any inaccurate personal data concerning you are rectified without undue delay. Taking into account the purposes of processing, you have the right to insist that incomplete personal data be completed, including by means of a supplementary statement.
c) Right to erasure (‘right to be forgotten’)
You have the right to insist that we delete personal data concerning you without undue delay, and we have the obligation to erase personal data without undue delay if one of the following reasons applies:
the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
you withdraw your consent on which the processing is based according to Article 6 (1)(a) GDPR or Article 9 (2)(a) GDPR, and where there is no other legal ground for the processing;
you object to the processing under Article 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing under Article 21 (2) GDPR;
the personal data have been unlawfully processed;
the personal data have to be erased to comply with a legal obligation under Union or Member State law to which we are subject;
the personal data have been collected in relation to the offer of information society services referred to in Article 8 (1) GDPR.
There is no right to erasure if the processing is necessary:
for exercising the right of freedom of expression and information;
for compliance with a legal obligation which requires processing according to the Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of public health in accordance Article 9(2)(h) and (i) as well as Article 9 (3) GDPR;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89 (1) GDPR, insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
for the establishment, exercise or defence of legal claims.
If we have made the personal data public and we are obliged under Article 17 GDPR to erase them, we shall take appropriate measures, taking into account the available technology and the costs of implementation, to inform the data controllers that process the personal data that you have requested the erasure of all links to those personal data and of any copies or replications of those personal data.
d) Right to restriction of processing
You have the right to insist that we restrict processing if one of the following conditions is met:
- die Richtigkeit der personenbezogenen Daten wird von Ihnen bestritten, und zwar für eine Dauer, die es uns ermöglicht, die Richtigkeit der personenbezogenen Daten zu überprüfen,
- the accuracy of the personal data is contested by you, for a period that enables us to verify the accuracy of the personal data;
- the processing is unlawful and you opposed the erasure of the personal data and instead requested the restriction of the use of the personal data;
- we no longer need the personal data for the purposes of the processing, but you require the data for the establishment, exercise or defence of legal claims; or
- you have objected to the processing pursuant to Article 21 (1) GDPR pending the verification whether the legitimate grounds asserted by our company override your own.
If the processing of personal data concerning you has been restricted, those data may be processed, apart from their storage, only with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.
e) Right to data portability
You have the right to receive the personal data concerning you, and which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us, in those cases where
- the processing is based on consent pursuant to Article 6 (1)(a) GDPR or Article 9 (2)(a) GDPR or on a contract pursuant to Article 6 (1)(b) GDPR and
- the processing is carried out by automated means.
Bei der Ausübung ihres Rechts auf Datenübertragbarkeit gemäß Absatz 1 haben Sie das Recht, zu When exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible.
The right to data portability shall not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
f) Right to object
You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on Article 6 (1)(e) or (f); this also applies to any profiling based on those provisions. We shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.
If personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling to the extent that it is associated with such direct marketing.
You have the right to object, on grounds relating to your particular situation, to processing of personal data concerning you for scientific of historical research purposes or for statistical purposes pursuant to Article 89 (1) GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
g) Automated decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or which similarly significantly affects you.
h) Right to withdraw consent under data protection law
You have the right to withdraw consent to the processing of personal data at any time.
i) Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you is unlawful.
j) Right to information
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the latter is obliged to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom the personal data concerning you have been disclosed, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients by the controller.
Use of Facebook
The controller responsible for data processing has integrated Facebook components on this website. A social network such as Facebook is a social meeting place operated on the Internet and is an online community that generally allows users to communicate and interact with each other in virtual space. A social network can serve as a platform for exchanging opinions and experiences, and it enables the Internet community to provide personal or company-related information. Facebook allows users of the social network to create private profiles, upload photos and to network via friend requests.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, U.S.A. Where a data subject lives outside the U.S.A. or Canada, the controller responsible for the processing of personal data is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Each time a user accesses one of the individual pages of this website, which is operated by the controller and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=en_US . As part of this technical process, Facebook receives information about which specific page of our website is visited by the data subject.
If the data subject is logged into Facebook at the same time, Facebook recognises which specific page of our website the data subject is visiting each time the data subject accesses our website and for the entire duration of the respective visit to our website. This information is collected by the Facebook component and associated by Facebook with the respective Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated on our website, for example on the ‘Like’ button, or if the data subject posts a comment, Facebook associates this information with the personal Facebook user account of the data subject and stores these personal data.
Facebook receives information via the Facebook component that the data subject has visited our website whenever the data subject is logged into Facebook at the same time as accessing our website; this takes place regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not want this information to be transmitted to Facebook, he or she can prevent transmission by logging out of his or her Facebook account before accessing our website.
Use of Instagram
The controller responsible for data processing has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and also to propagate such data on other social networks.
Instagram services are operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
Each time a user accesses one of the individual pages of this website, which is operated by the controller and on which an Instagram component (Insta button) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Instagram component to download a representation of the corresponding Instagram component from Instagram. As part of this technical process, Instagram receives information about which specific page of our website is visited by the data subject.
If the data subject is logged into Instagram at the same time, Instagram recognises which specific page the data subject is visiting each time the data subject accesses our website and for the entire duration of the respective visit to our website. This information is collected by the Instagram component and associated by Instagram with the respective Instagram account of the data subject. If the data subject clicks one of the Instagram buttons integrated on our website, the data and information thus transmitted will be associated with the personal Instagram user account of the data subject and will be stored and processed by Instagram.
Instagram receives information via the Instagram component that the data subject has visited our website whenever the data subject is logged into Instagram at the same time as accessing our website; this takes place regardless of whether the data subject clicks on the Instagram component or not. If the data subject does not want this information to be transmitted to Instagram, he or she can prevent transmission by logging out of his or her Instagram account before accessing our website.
Use of YouTube
The controller responsible for data processing has integrated YouTube components on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge. YouTube allows all kinds of videos to be published, which is why complete film and television programmes, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.
YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.
Each time a user accesses one of the individual pages of this website, which is operated by the controller and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.about.youtube. As part of this technical process, YouTube and Google receive information about which specific page of our website is visited by the data subject.
If the data subject is logged into YouTube at the same time, YouTube recognises which specific page of our website the data subject is visiting when a page containing a YouTube video is accessed. This information is collected by YouTube and Google and associated with the respective YouTube account of the person concerned.
YouTube and Google receive information via the YouTube component that the data subject has visited our website whenever the data subject is logged into YouTube at the same time as accessing our website; this takes place regardless of whether the data subject clicks on the YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, he or she can prevent transmission by logging out of his or her YouTube account before accessing our website.
Diese Webseite nutzt Google Maps zur Darstellung interaktiver Karten und zur Erstellung von This website uses Google Maps to display interactive maps and to create directions on how to get to us. Google Maps is a mapping service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, U.S.A. By using Google Maps, information about the use of this website, including your IP address and the (start) address entered in the route planner function, may be transmitted to Google in the U.S.A. When you load a page from our website containing Google Maps, your browser connects directly to Google servers. The map content is sent by Google straight to your browser and integrated by Google into the website. This means we have no control over the amount of data collected by Google in this way. According to our knowledge, these are the following data at least:
the date and time of your visit to the website in question;
the Internet address or URL of the accessed website;
your IP address, and the (start) address entered in route planning;
Auf die weitere Verarbeitung und Nutzung der Daten durch Google haben wir keinen Einfluss und können
By using this website, you consent to the processing of data collected about you by the Google Maps route planner in the manner described above and for the purposes set out above.
This site uses ‘web fonts’ provided by Adobe Typekit to display fonts consistently. When you access a page, your browser loads the necessary web fonts into your browser cache in order to display texts and fonts correctly.
To do this, the browser you are using must connect to Adobe Typekit’s servers. This will inform Adobe Typekit that our website has been accessed from your IP address. Adobe Typekit web fonts are used in the interest of a uniform and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Article 6 (1)(f) GDPR.
If your browser does not support web fonts, your computer will use a standard font.
Online job applications
We offer you the opportunity to apply to us by email. When such digital applications are submitted, the applicant and application data are processed by us electronically for the purpose of handling the application process.
The legal basis for this processing is found in Section 26 (1) sentence 1 (f) of the Federal Data Protection Act (BDSG), in conjunction with Article 88 (1) GDPR.
If the application process results in an employment contract being concluded, we will store the data you submitted with your application in your personnel file for the purpose of the usual organisational and administrative process – in compliance with our more extensive legal obligations, of course.
The legal basis for this processing is likewise found in Section 26 (1) sentence 1 of the Federal Data Protection Act, in conjunction with Article 88 (1) GDPR.
In the event of an unsuccessful application, we will automatically erase the data transmitted to us once two months have elapsed. However, the data will not be erased if they have to be stored for a longer period of up to four months or until the completion of court proceedings due to statutory regulations, e.g. due to the obligation to provide evidence under the General Act on Equal Treatment (AGG).
The legal basis in such a case in found in Article 6 (1)(f) GDPR and Section 24 (1) No. 2 of the Federal Data Protection Act. Our legitimate interest is that of legal defence and/or enforcement. If you expressly consent to your data being stored for a longer period of time, e.g. for your inclusion in a database of applicants or potential applicants, the data will be processed on the basis of your consent. The legal basis for processing is then provided by Article 6 (1)(a) GDPR. However, you can, of course, withdraw your consent at any time pursuant to Article 7 (3) GDPR by expressing such withdrawal to us with future effect.
Our website contains links to other third-party websites over the content of which andreas schneider architekten GmbH und Co. KG has no control. We are therefore unable to provide any warranties in respect of such third-party content. The respective provider or operator of the web pages is responsible for the content of the linked websites. Please refer, therefore, to the privacy policies of the respective websites. However, we cannot reasonably be expected to continuously monitor the linked pages for breaches of law, in the absence of any specific cause for concern. The respective links will be promptly removed as soon as any violations come to our attention.
Latest amendment: 28/02/2022