Data privacy
We would like to explain to you how we use the data collected when you make use of our online services, to whom we pass on this data and how you can potentially influence the use and storage of your data, where applicable. You can rest assured that we guarantee compliance with the valid data protection regulations at all times.
The data controller as defined in the European General Data Protection Regulation is:
TEST Berlin GmbH & Co. KG
Knesebeckstrasse 59/61
10719 Berlin
Telephone: +49 30-3 99 99-10
Fax: +49 30-3 99 99-18
Email: info@testberlin.de
Managing director: Elisabeth Unger
Our data protection officer can be contacted at:
TEST Berlin GmbH & Co. KG
For the attention of the data protection officer
Knesebeckstrasse 59/61
10719 Berlin
You also have the right to lodge a complaint with a supervisory authority in the event of unlawful use of the data. The responsible body in our case is:
Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219
10969 Berlin
Telephone: +49 (0)30 13889-0
Fax: +49 (0)30 2155050
Email: mailbox@datenschutz-berlin.de
When you call up internet pages, we only find out the IP address you used, the internet provider used by you, information on your web browser, the date and time of the visit, the page you visited as well as the internet page from which you called up our internet offer. This information is stored in the log files of a server and serves exclusively to create anonymous access statistics and for diagnostic purposes in the event of an error.
The legal basis of the data collection is Art. 6 I (f) GDPR. This data is not merged with other data sources. The IP address is anonymised. Our legitimate interest in the collection of this data is based on the fact that we can use this data to optimise our offer for our users, for example by preventing access by malicious websites or optimising access via certain browsers, and since logging the IP address makes it possible to provide the web page to the visitor in the first place.
You have a general right to object to this data collection. In this exceptional case, this does not actually come into consideration, since the use of the website would otherwise be impossible. The data is deleted as soon as it is no longer required for the above-mentioned purposes.
We will pass on data that you have provided to us in the course of a hotel reservation to the corresponding hotel to the extent necessary for the processing of the reservation.
For the transaction of payments via credit card, we have commissioned the company B & S Card Service GmbH. Information that you input in this context is directly transmitted to the company B & S Card Service GmbH as well as to the corresponding bank or credit institutes, and then processed by them.
Inquiry and booking details may be passed on to our partner company, TEST GmbH & Co. KG in Düsseldorf, for further processing. No further transmission of data to third parties takes place.
The legal basis for the collection and processing of the data and for the transmission in the context of the implementation of the contract is Art. 6 I (b) GDPR.
When transmitting your personal data and data for the payment transaction, this data is protected by 128-bit SSL encryption technology. As a result, there is no opportunity for unauthorised third parties to read this information during the transmission. You can identify these protected web pages by the prefix “https://” instead of the usual “http://” in the address bar of your browser.
When you apply for a job with us in response to an advertisement, your personal data such as name, address and telephone number are collected by us and stored for the duration of the selection procedure. Your data shall only be used by authorised persons in the personnel department or the management for the processing of your application in the scope of the selection procedure. Your personal data is not passed on to third parties.
If the specific position for which you are applying has already been filled, but you come into question for a future position with us or a position in a partner company based on your profile, we will obtain your explicit consent before further storage or forwarding of the application, unless you have already agreed to such storage or forwarding in your application.
If you send us an unsolicited application and you use our general contact email address to do so, the contents of your application email may be viewed by unauthorised staff. Our policy requires that the application documents are immediately forwarded to the personnel department unopened, and that the incoming and forwarding emails are deleted. If you wish to rule this out, we request that you send your unsolicited applications exclusively to bewerbungen(at)testberlin.de.
The legal basis is Art. 6 I (a) GDPR, since upon submitting your application documents, you consent to the above-mentioned processing of your data. The data is deleted when you revoke your consent to the use of said data, without the lawfulness of the processing that occurred on the basis of your consent being affected, unless statutory retention periods come into play. In these cases, the data shall be blocked instead of deleted. Otherwise, application documents shall be deleted after a period of 6 months upon termination of the selection procedure, unless you have expressly declared your consent to the storage of your application data for future vacancies. You have the right to request information on and revocation of your personal data that has been saved by us at any time; see below for your rights as a data subject.
When you use our contact form, we collect and store your name and email address for the purpose of answering your inquiry. Provision of your telephone number so that we can call you back is optional.
If you send us a contact inquiry via email, we collect and store the email address and the data contained in the email.
The legal basis is Art. 6 I (a) GDPR, since you consent to the above-mentioned processing of your data when you use the form and when you send an email. If the inquiry results in a contractual relationship or if the inquiry refers to an existing contractual relationship, the legal basis is also based on Art. 6 I (b) GDPR, since the storage of the data is necessary for the fulfilment of a pre-contractual or contractual obligation.
The deletion of the data takes place when the purpose of the storage no longer applies, i.e. after your email/contact form inquiry has been answered or once the issue related to the inquiry has been conclusively resolved. In the case of a potential subsequent contractual relationship, the statutory retention periods apply.
You have the right to revoke your granted consent at any time, without the lawfulness of the processing that occurred on the basis of your consent being affected.
With regard to your entitlement to deletion and information, see clause 19 below on your rights as a data subject.
When you register or create a user account on our website, we collect an email address as well as a password from you. We use the “salted hash” technique to encrypt your password, in order to prevent unauthorised access to your password in accordance with the latest technology. In addition, we collect certain personal data as compulsory information. We require this information so as to be able to process your respective orders. The compulsory information includes the name of your company, your name, your address and a telephone number. Additional information is provided voluntarily by you, and there are no implications whatsoever if you do not provide it. The data is permanently stored by us.
The legal basis for the collection and processing of the data in the context of the registration is Art. 6 I (a) GDPR as well as Art. 6 I (b) GDPR in the context of fulfilment of the contract.
The data is deleted when you unsubscribe from our website or when you revoke your consent to the use of said data, without the lawfulness of the processing that occurred on the basis of your consent being affected, unless statutory retention periods come into play, e.g. for accounting records. In these cases, the data shall be blocked instead of deleted.
You have the right to request information on your personal data that has been saved by us at any time; see clause 19 below, also with regard to your additional rights as a data subject.
Cookies constitute information that is deposited on your computer’s hard drive by your web browser in the form of small files. We only save session cookies, which make it possible to allocate the information provided by you to your user session during the use of our online offer. These cookies are automatically deleted after you close the web browser.
The legal basis is Art. 6 I (f) GDPR. Our legitimate interest arises from the fact that the aforementioned cookies are necessary for the accessibility of the website, no tracking data is collected in the process and thus no infringement of your personal rights or fundamental freedoms occurs.
You can decline to accept cookies via your web browser. However, this may potentially lead to impairments in functionality. To read more about your additional rights as a data subject, see clause 19 below.
In addition, we also use cookies from cookiebot (https://www.cookiebot.com/de/), a product by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, for obtaining your consent. If you grant your consent, cookiebot automatically logs the following data with Cybot (https://www.cookiebot.com/de/privacy-policy/):
- The IP number of the end user in anonymised form (the last three numbers are changed to ‘0’).
- Date and time of the consent.
- User agent of the end user’s browser.
- The URL from which the consent was submitted.
- An anonymous, random and encrypted key.
- The consent status of the end user, which serves as evidence of the consent.
The data saved serves to ensure that web analytics services only collect data with your consent, and also in order to document this consent and for the creation and display of cookie declarations for end users.
The key and the consent status are also saved in the end user’s browser in the cookie “CookieConsent” so that the website is able to automatically read and observe the consent of the end user for all subsequent page requests and future end user sessions for up to 12 months.
The legal basis for the processing of your data is Art. 6 Para. 1 Items c) and f) GDPR, since we are legally obliged to be able to provide evidence of consent, and our legitimate interest arises from the fact that we are only able to obtain the necessary consent in this way.
This website uses the web analytics service Google Analytics, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; (“Google”).
Google Analytics uses so-called “cookies” for the purpose of analysing the user behaviour on the website as well as for measuring the reach.
Upon calling up our website, the user is informed of the use of cookies for analytical purposes, and his/her consent to the processing of the personal data used in this context is obtained. Reference to this data privacy statement is also made in this context. Information is provided on the so-called “consent tool”, with which your consent was obtained, at another point in this data privacy statement.
You can find an overview of how Google cookies are used and which cookies are employed in this overview.
The legal basis for the processing of personal data using cookies for analytical purposes is – in the event that corresponding consent has been obtained from the user – Art. 6 Para. 1 Item a GDPR.
On our website, we have added the code “gat.anonymizeIp();” to Google Analytics in order to ensure the anonymous recording of IP addresses (so-called IP masking). It is therefore not possible for us to assign the collected analysis data to a specific person.
Revocation and deletion:
You may also revoke your consent at any time by deleting all the (consent) cookies that have been placed in your browser.
You may, in principle, prevent cookies from being stored by selecting the appropriate settings on your browser; however, please note that if you do so you may not be able to take advantage of the full functionality of this website. You may additionally prevent the collection of data produced by the cookie and associated with your use of the website (including your IP address), its transmission to, and its processing by Google, by downloading and installing the browser add-on available at the following link.
The aforementioned add-on may potentially not be available when accessing our website via browsers on mobile devices. In this case, as well as generally, you can thus alternatively prevent the use and transmission of the data to Google by clicking on this link. Please note that this is a so-called opt-out cookie that is only valid for https://www.hotelreservation.de and the respective browser used. If you delete the cookies in your browser history, you will have to click on the link again if you visit our website again in order to object to the use of data. The same applies if you access the website from a different browser.
Generally speaking, the data stored by Google is deleted within 14 months.
You can find more detailed information on the data protection policy with Google Analytics at https://support.google.com/analytics/answer/6004245?hl=de. You have the right to request information on and object to your personal data that has been saved by us at any time; see clause 19 below with regard to your rights as a data subject.
We use AdWords, and as part of this we use Google Conversion Tracking, an analytics service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google AdWords places a cookie on your computer (“conversion cookie”), provided you come to our website via a Google advert. These cookies lose their validity after 30 days, and they are not used by us to collect any personal data that would reveal the identity of the user. However, your IP address is sent to Google Inc. in the USA, so that Google can carry out the evaluations for us that are described below. We have concluded an order processing contract with Google LLC, whereby Google Inc. provides us with evidence of its compliance with appropriate and suitable technical and organisational measures for the protection of your personal data.
So long as the cookie is still active, with the help of Google Conversion Tracking, when a user visits our website, we can identify whether this user clicked on the AdWords advert and was originally redirected to our website in this way. Each AdWords customer receives a different cookie. The information gained using the cookies serves solely to create conversion statistics for us as an AdWords customer. In this way, we discover the total number of users who clicked on one of our adverts and was then redirected to one of our pages furnished with a conversion tracking tag.
The legal basis for the use of the conversion tracking cookie is Art. 6 para. 1 p. 1 lit. a) DSGVO in the presence of a corresponding consent.
Objection and deletion
You may prevent the previously described gathering of information by deactivating the automatic placement of cookies in your browser settings in general, or by setting your browser so that only cookies from the domain “googleadservices.com” are blocked. We cannot exclude the possibility that this may cause limitations in the usability of our website. In addition, you also have the option of deactivating the use of cookies, and thus of personalised adverts, in Google’s Ad Preferences Manager. You have the right to request information on and object to your personal data that has been saved by us at any time; see below for your rights as a data subject.
We use the map service Google Maps of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). If you view our location using Google Maps, this service can be used to collect data on you. You can read about this in more detail in Google’s terms of use for Maps as well as Google’s data protection guidelines.
The legal basis for the collection and storage of the data is Art. 6 para. 1 p. 1 lit. a) DSGVO in the case of corresponding consent.
We integrate the function for the recognition of bots, e.g. when inputting information in online forms, known as “Google ReCaptcha” from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This may involve data transmission of your IP address to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Similarly, two cookies are also placed, one (“NID”) with a duration of 6 months and one (“consent”) with a duration of 20 years. Further information as to whether and what data is collected in this process is available in Google’s data privacy statement.
The legal basis for our use of the Google ReCaptcha function is Art. 6 I f GDPR. Our legitimate interest is the protection of our forms from misuse by bots.
You can decline to accept cookies via your web browser. However, this may potentially lead to impairments in functionality. You can also object by deleting all the cookies placed in your browser. In addition, you can object to usage-based advertising here. To read more about your additional rights as a data subject, see clause 19 below.
The information generated by the cookies about your use of this website is generally transmitted to and stored by a Google server in the United States. However, due to the IP anonymisation that is activated on this website, within member states of the European Union or in other contracting states to the Agreement on the European Economic Area, your IP address is abbreviated by Google prior to this. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services to the website operator relating to website activity and internet usage. The IP address that is transmitted from your browser within the scope of Google Analytics is not linked with other Google data.
We have concluded an order processing contract with Google LLC, whereby Google Inc. provides us with evidence of its compliance with appropriate and suitable technical and organisational measures for the protection of your personal data.
We utilise the CRM system of the provider salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, in order to be able to process user inquiries more rapidly and efficiently.
salesforce only uses the user data for the technical processing of the inquiries and does not pass them on to third parties. Pseudonymised use is possible. Over the course of processing service inquiries, it may be necessary for further data to be collected (name, address).
If users do not agree with data collection through and data storage in the external cloud system of salesforce, we offer alternative contact options for submitting service inquiries via email, telephone, fax or post.
Users can find more information in the data privacy statement of salesforce: https://www.salesforce.com/de/company/privacy/.
The legal basis is Art. 6 Para. 1 Item (f) GDPR. Our legitimate interest is in ensuring the technical conditions for the processing of inquiries.
This website uses the “Clarity” service of Microsoft Corporation, Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft Clarity is a web analytics service that enables analysis of the use of our website. The service creates a log of mouse movements and clicks with the intention of deriving potential improvements for the website from it. The information collected is transmitted to Microsoft Clarity and stored there. Microsoft reserves the right to use the collected information for its own advertising purposes. For more information, please visit https://clarity.microsoft.com.
For further information on data protection, please refer to the data protection declaration at https://privacy.microsoft.com/en-US/privacystatement.
The legal basis for the use of Microsoft Clarity is, in the case of consent, Art. 6 para. 1 p.1 lit. a) DSGVO. You give your consent by agreeing to the corresponding analysis cookies or all cookies. You can change your settings at any time.
If you wish to object to the use of Microfort Clarity, you can use the objection and opt-out options at https://choice.microsoft.com/en-us/opt-out or delete all cookies in your browser.
For the purpose of communication with our customers and for the purpose of advertising new products or services, as well as for general information on our company and its employees, we operate a so-called Facebook fan page. Customers and interested parties can join this fan page by clicking on the “Like” button, and can thus receive regular information about our company in their news feed on Facebook. We would like to point out that you use this Facebook fan page and its functions under your own responsibility.
This applies in particular to the use of the interactive functions (e.g. comment, share, like).
For the operation of our Facebook fan page, we make use of the technical platform and the services of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland.
When you visit our Facebook fan page, Facebook records, amongst other things, your IP address and further information available in the form of cookies on your computer. You can find Facebook’s cookie guideline here: https://www.facebook.com/policies/cookies/. This information is used to provide us as the operator of the Facebook pages with statistical information on the use of the Facebook fan page.
Facebook provides more detailed information on this topic at the following link: http://de.facebook.com/help/pages/insights.
The data collected on you in this context is processed by Facebook Ltd. and may, in this process, potentially be transferred to countries outside of the European Union. As to what information Facebook receives and how this information is used, Facebook describes this in general terms in its data protection guideline.
There you will also find information on ways to get in contact with Facebook as well as information on the settings options for adverts. The data protection guideline is available at the following link: https://www.facebook.com/privacy/explanation The manner in which Facebook uses the data from visits to Facebook pages for its own purposes, the extent to which activities on the Facebook fan page are assigned to individual users, the length of time for which Facebook stores this data and whether data from a visit to the Facebook fan page is transmitted to third parties is not described conclusively or clearly by Facebook, and is not known to us.
With regard to the web page insights, pursuant to the jurisdiction of the European Court of Justice, we share joint responsibility with Facebook according to Art. 26 Para. 2 clause 2 GDPR. A joint responsibility agreement has been concluded with Facebook to this end; you may view this agreement at the link https://de-de.facebook.com/legal/terms/page_controller_addendum.
By means of the cookies it uses and the information it gathers, Facebook is able to retrace the fact that you have called up our fan page and how you have used it. This also applies to all other Facebook pages as well as the use of the social share buttons, to the extent that they are incorporated on our website.
This data can be used to offer contents or adverts that are tailored to you.
If you wish to avoid this, you should log out of Facebook or deactivate the function “stay logged in”, delete the cookies deposited on your device, and close and reopen your browser. In this way, Facebook information that could lead to you being directly identified is deleted.
This allows you to use our Facebook fan page without your Facebook identification being revealed; however, in this case, your IP address is also recorded and cookies are once again placed. You can decline to accept cookies via your web browser. However, this may potentially lead to impairments in functionality.
If you access interactive functions on the page (like, comment, share, news etc.), the Facebook login screen appears. If you then log in, you are once again identifiable for Facebook as a specific user.
You can find information on how to manage or delete existing information about yourself in Facebook’s data protection guideline.
As the operator of our Facebook fan page, we do not collect or process any data beyond this.
With our newsletter, we regularly inform you of the latest trade fair events, exclusive hotel offers and all information and updates regarding our services. If you wish to receive the newsletter offered, we require from you – in addition to checking the corresponding option in the ordering process or in our newsletter form – a valid email address. We will then send you a confirmation email with which you can verify your email address and your desire to receive the newsletter. To verify your subscription, we save the IP address, both when you sign up and when you activate the confirmation link. In addition, in order to be able to legally prove that you signed up, we save the date and time of the subscription, the email address provided as well as the date and time of the activation of the link in the confirmation email.
You may object to the receipt of further newsletters at any time by clicking on a link at the end of any newsletter, without incurring any costs other than the transmission costs according to the basic tariffs. You may also send us an email at info(at)testberlin.de with your request to remove you from the distribution list.
If you have purchased products from us, we will occasionally inform you by email of new products that are similar to or go with the products you have purchased. If you do not wish to receive this product information by email, you may object to the use of your email address for this purpose in future at any time by sending an email to info(at)testberlin.de or, after receiving such an information email, by clicking on a link at the end of said email, without incurring any costs other than the transmission costs according to the basic tariffs.
The legal basis for the collection and processing of your data for the newsletter marketing is, based on your express consent, Art. 6 I (a) GDPR. The legal basis for the conditions for the consent and the revocation thereof can be found in Art. 7 GDPR.
The legal basis for the collection and processing of your data is Art. 6 I (f) GDPR. Our legitimate interest is based on the type of direct advertising permitted by § 7 III Act Against Unfair Competition (UWG). The level of intrusion in your fundamental freedoms is low, since we provide you with transparent information on the data collection, you may object at any time and we only send you targeted information on goods and accessories that are similar to or go with the products purchased by you.
The data is deleted as soon as you unsubscribe from our newsletter.
You have the right to request information on and object to your personal data that has been saved by us at any time; see clause 19 below with regard to your rights as a data subject.
The deletion of this data takes place upon expiry of the applicable statutory retention obligations. If we are not subject to any statutory retention obligations, the deletion of the data takes place as soon as the purpose no longer applies.
a. Right to object
If we process your data to safeguard legitimate interests (Art. 6 I (f) GDPR), you may object to this processing for grounds relating to your particular situation. We will then no longer process your personal data, unless we can provide evidence of compelling reasons worthy of protection for the processing which outweigh your interests, rights and freedoms or the processing serves the assertion, exercise or defence of legal claims.
In the event of an objection against data processing for the purpose of direct advertising, the processing will no longer take place for this purpose.
b. Right to information
You have the right to request confirmation from us as to whether we process personal data regarding you and, if this is the case, you have a right to receive information on the personal data and associated information pursuant to Art. 15 GDPR.
c. Right to rectification
Pursuant to Art. 16 GDPR, you have the right to request that we immediately rectify or complete personal data regarding you that is incorrect or incomplete.
d. Right to deletion
You have the right to request that we immediately delete personal data regarding you, and we are obliged to delete this data immediately if one of the reasons in Art. 17 GDPR applies.
e. Right to restriction of the processing
You have the right to request that we restrict the processing of personal data regarding you if one of the conditions stated in Art. 18 GDPR is met.
f. Right to data portability
You have the right to receive the personal data regarding you that you have provided to us in a structured, commonplace and machine-readable format, and you have the right to demand that we transmit this data to another data controller, insofar as this is technically feasible.
This website uses the analytics tool “Mouseflow”, Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen V, Denmark.
The purpose of this data processing is for analyzing this website and its visitors. This data is collected and stored for marketing and optimization purposes. From this, usage profiles can be created under a pseudonym. Cookies may also be used for this purpose. The web analysis tool records selected individual visits (only with anonymized IP address). Logs of mouse movements and clicks are created in order to derive potential improvements for the website.
The data collected with Mouseflow will not be used to personally identify the visitor to this website without the separately granted consent of the person concerned and will not be merged with personal data about the bearer of the pseudonym.
An Data Processing Agreement has been concluded with Mouseflow.
Further information on data protection can be found at https://mouseflow.com/de/gdpr/.
The legal basis is Art. 6 para. 1 p. 1 lit. A) GDPR if consent has been granted. You can revoke your consent at any time by deleting all cookies in the browser or changing the cookie settings on our website.