Thank you for visiting our website and taking an interest in our company.
It is generally possible to use our website without providing personal data. However, if you use our company's services via our website, it may be necessary to process your personal data. The data automatically collected when you visit our website or personal data entered by you when using our services is processed in accordance with the current legal provisions for the protection of personal data. If it is necessary to process your personal data and there is no legal basis for such processing, we will always obtain your consent for the necessary purpose of processing. As the company responsible for processing, we have established technical and organizational measures to ensure the highest possible level of protection of your personal data. However, we would like to point out that data transmission via the internet may have security gaps.
If you wish to use the services of our company and do not wish to use the internet as a means of data transmission, you can contact us by telephone.
1. Contact details of the Data Controller
The Data Controller as defined by the General Data Protection Regulation is:
The appointed Data Privacy Officer is:
2. Collection of general access information
Every time you visit our website, server log file information that your browser sends to us is automatically recorded. This information is as follows:
We would like to point out that this data cannot be assigned to a specific person. We use this technical access information exclusively for the following purposes:
This data is stored for a maximum of 7 days as a technical precaution to protect the data processing systems against unauthorized access.
3. Collection and transfer of personal data
We use your personal data only for the purposes stated on this information page on data protection.
Our website uses the following input masks for the collection of personal data:
3.1 Performance Buildings
Our website offers the option to place bookings online. For usage and requests we use the services of Performance Buildings, Limmatquai 4, 8001 Zurich, Switzerland.
Personal data about the user is collected to enable Design Offices GmbH to provide its service and also to comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of the user or third parties), and detect malicious and fraudulent activities.
We transmit as personal data the data that is entered during the registration process:
In addition, data is collected for the following purposes: Analytics, contacting the user, registration and authentication and management of support and contact requests. Users can find more detailed information about these processing purposes and the personal data used for each purpose in the section of this document entitled “Detailed information on the processing of personal data”.
In addition, the personal data is transmitted to us, Design Offices GmbH, for the purpose of establishing contact. This data is only used to organize and execute the requested booking and is not be passed on to third parties. For more information about Performance Buildings' data privacy practices, please visit https://performancebuildings.ch/.
Users are responsible for all personal data of third parties that is obtained, published or passed on by Design Offices and confirm that they have obtained consent to the transfer of personal data of any third parties to Design Offices.
The data is processed at the offices of the provider and at all other places where the offices involved in data processing are located.
Personal data is processed and stored for as long as required for the purpose for which it was collected.
The following therefore applies:
Furthermore, the provider is permitted to store personal data for a longer period of time if the user has consented to such processing, as long as the consent is not revoked. In addition, the provider may be obliged to store personal data for a longer period of time if this is necessary to fulfill a legal obligation or by order of an authority.
After the retention period has expired, personal data is deleted. The right of access, the right to erasure, the right to rectification and the right to data portability cannot be exercised after the retention period has expired.
For the processing and provision of services, we collaborate with defacto BE/ONE GmbH, Auenstraße 37, 80469 Munich, Germany, which is under obligation to process orders in accordance with Art. 28 GDPR.
We transmit as personal data the data that you enter and upload during the registration process.
In addition, the data you have entered is transmitted to us for the purpose of contacting you. This data is only used to organize and execute the requested booking.
Also your data is passed on by defacto BE/ONE to the following printers for the production of the DO.Member-Card
Your data is not passed on to third parties in any other way, unless disclosure is required by law. The legal basis for data processing is Art. 6 Para. 1 (b) GDPR, processing for the provision of services (DO.Member).
3.3 Six Payment Services
When you use the online booking facility on the website, we offer you the option of online payment. For this we use the services of Six Payment Services AG, Hardturmstrasse 201, 8021 Zurich, Switzerland.
Six Payment Services uses “cookies” which are stored on your computer.
For more effective communication and optimization of its user experience Design Offices, uses a live chat system provided by the company Userlike UG (haftungsbeschränkt), Probsteigasse 44-46, 50670 Cologne, Germany.
You can use the live chat like a contact form to chat with our employees virtually in real time. When you start the chat, the following personal data is generated:
Depending on the course of the conversation with our employees, further personal data may be collected during the chat, which you will enter. The type of this data depends very much on your request or the problem you describe to us. The processing of all this data serves the purpose of providing you with a quick and efficient way of contacting us, thereby improving our customer service.
All our employees have been and are trained on the subject of data privacy and receive instruction regarding the secure and confidential handling of customer data. All our employees are obliged to maintain confidentiality and have signed an addendum to their employment contracts to this effect obliging them to maintain confidentiality and observe data protection.
If you would like to receive the newsletter offered on the website containing regular information about our offers and products, we require your e-mail address as mandatory information. We use the so-called double opt-in procedure for sending out the newsletter. This means that we will only send you our newsletter by e-mail if you have expressly confirmed to us that you agree to receive newsletters. The first step involves you receiving an e-mail with a link that you can use to confirm that you, as the owner of the relevant e-mail address, wish to receive newsletters in the future. By confirming, you give us your consent according to Art. 6 Para. 1 (a) GDPR to use your personal data for the purpose of the sending out the newsletter as you requested.
When you register for the newsletter, in addition to the e-mail address required for sending the newsletter we store the IP address by which you have registered for the newsletter as well as the date and time of registration and confirmation in order to be able to trace possible misuse at a later date.
You can unsubscribe from the newsletter at any time using the link included in every newsletter or by sending an e-mail to the person responsible for the newsletter mentioned above (or to firstname.lastname@example.org). Once you have canceled your subscription, your e-mail address is deleted from our newsletter distribution list immediately, unless you have expressly consented to the continued use of the data collected or continued processing is otherwise permitted by law.
In order to send out the newsletter, we use the services of CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany. We transmit the e-mail address and name to CleverReach for the purpose of sending the newsletter. CleverReach organizes and analyzes the sending of our newsletters. CleverReach is certified according to the EU-US Privacy Shield. The Privacy Shield is an agreement between the European Union (EU) and the USA which is intended to guarantee compliance with European data protection standards in the USA. We have concluded a so-called Data Processing Agreement with CleverReach, in which we require CleverReach to protect our customers’ data and not to pass it on to third parties. For further information on data privacy at CleverReach, see: www.cleverreach.com/de/datenschutz/.
If you provide us with personal data as part of the application process, this is stored for collection, processing and/or use.
3.7 This website uses Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Center, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: https://www.hotjar.com).
Hotjar is a tool for analyzing your user behavior on our website. With Hotjar we can, among other things. Record your mouse and scroll movements and clicks. Hotjar can also determine how long you stayed with the mouse pointer on a certain point. From this information, Hotjar creates so-called heat maps, which can be used to determine which website areas are preferred by website visitors.
We can also determine how long you stayed on a page and when you left it. We can also determine at which point you canceled your entries in a contact form (so-called conversion funnels).
In addition, Hotjar can be used to obtain direct feedback from website visitors. This function serves to improve the website operator's web offers.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be restricted.
The use of Hotjar and the storage of Hotjar cookies are based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.
If you would like to deactivate data collection by Hotjar, click on the following link and follow the instructions there: https://www.hotjar.com/opt-out
Please note that Hotjar must be deactivated separately for each browser or for each end device.
For more information about Hotjar and the data collected, please refer to Hotjar's data protection declaration under the following link: https://www.hotjar.com/privacy
3.7 Contact by email
When you contact us by email, we will collect and store the information from your enquiry. We will delete these data as soon as their storage is no longer necessary, or restrict any processing if statutory retention periods apply.
These data serve the process of communicating with you. The email address and other information from the enquiry will be processed to enable us to answer your email enquiry.
The legal basis for processing the data is given by Art. 6 para. 1 p. 1 (f) GDPR. The justified interest lies in the purposes specified above.
3.8 Use of online contact forms
If you use the online contact form to contact us, the data communicated by you (your email address and the information from your message) will be collected and saved by us. We will delete these data as soon as their storage is no longer necessary, or restrict any processing if statutory retention periods apply.
The contact form serves to make contact with us quickly and easily, and it represents a service on our part. Your email address is registered to enable your enquiry to be sent to us and allow us to reply to it.
The personal data listed above are collected on the basis of Art. 6 para. 1 p. 1 (f) GDPR. The justified interest lies in the purposes specified above.
As a further service, we also offer an online enquiry form on certain sub-pages of our website which present our various offices. We collect personal data through this form. We will delete these data as soon as their storage is no longer necessary, or restrict any processing if statutory retention periods apply.
When you contact us via the online enquiry form, the only mandatory information to be collected is your email address.
The following personal data are collected on a voluntary basis:
The enquiry form serves to contact us quickly and easily, and it represents a service on our part. Your email address is registered to enable your enquiry to be sent to us and allow us to reply to it. Your form of address and your name are collected to enable us to address you personally. We collect your telephone number to enable us to contact you quickly.
The personal data listed above are collected on the basis of Art. 6 para. 1 p. 1 (f) GDPR. The justified interest lies in the purposes specified above.
This website uses the following types of cookies whose scope and function are explained below:
4.1 Transient cookies
Transient cookies are automatically deleted when you close the web browser. In particular, they include session cookies. These save a so-called session ID with which different enquiries from your browser can be assigned to the common session. This enables your PC to be recognised when you return to our website. These session cookies are deleted when you close the web browser.
4.2 Persistent cookies
Persistent cookies are automatically deleted after a specified period which may be different depending on the cookie. You can delete the cookies at any time in the security settings of your browser.
4.3 Cookies specifically used
|collect||Statistiken||Google Analytics.com||Pixel||1 Jahr|
|Fr Marketing||Marketing||Facebook.com||http||3 Monate|
4.5 Legal basis
Rechtsgrundlage ist Art. 6 Abs. 1 S. 1 lit. f DSGVO. Die berechtigten Interessen folgen aus den oben genannten Zwecken.
Die meisten Browser akzeptieren Cookies automatisch. Sie können Ihren Browser jedoch so konfigurieren, dass keine Cookies auf Ihrem Computer gespeichert werden oder stets ein Hinweis erscheint, bevor ein neues Cookie angelegt wird. Die vollständige Deaktivierung von Cookies kann jedoch dazu führen, dass Sie nicht alle Funktionen unserer Website nutzen können.
5. Application and use of tracking, analysis tools and social plug-ins
5.1.1 Google Tag Manager
On this website, the “Google Tag Manager” service is used. The Tag Manager is a tool for the administration of so-called tags, which are used for tracking in online marketing. The Tag Manager itself does not process any personal data, as it is only used for the administration of other services such as Google Analytics, etc.
5.1.2 Google AdWords
The “Google Ads” service is used on this website. This service has the purpose of so-called “conversion tracking”, i.e. it enables to see what happened after you clicked on one of our ads. Cookies are applied for this purpose which have a limited validity (30 days) and do not contain any personal data. Personal identification of the user is therefore not possible.
The legal basis for using the service is Art. 6 (f) GDPR – legitimate interest. Our legitimate interest in using this service is to analyze and optimize the operation of our website.
5.1.3 Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google").
Google Analytics uses so-called “cookies” (see Item 4.2 above) which are text files placed on your computer to enable your use of the website to be analysed.
The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the USA and stored there. However, if IP-anonymization is activated on this website, your IP address will be truncated beforehand within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the whole IP address be transferred to a Google server in the USA and truncated there.
For those exceptional cases in which personal data are transmitted to the USA, Google has signed up to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The IP address transmitted from your browser by Google Analytics is not combined with other Google data.
This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are processed in abbreviated form making it impossible to identify them with a person. If the data collected about you establishes a personal connection, this is immediately precluded and the personal data thereby promptly deleted.
We use Google Analytics to analyse the use of our website and to enable us to regularly improve it. We can use the statistics received to improve our product and to make our website more attractive to you as the user.
You can prevent the storage of cookies by means of a corresponding setting in your browser software; however, we would like to point out that in this case you might not be able to use all the functions of this website to their full extent. You can also prevent the data generated by the cookie relating to your use of the website (incl. your IP address) from being transmitted to Google and processed by Google by downloading and installing the browser plug-in which is available on the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
This website also uses Google Analytics for the cross-device analysis of visitor streams, carried out via a user ID. You can deactivate the cross-device analysis of your use in your customer account under “My Data”, “Personal Data”.
Information on the external supplier: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
5.1.4 Google Maps
We use the products of Google Maps on this website. This enables us to directly display interactive maps on the website, thereby enabling you to use the map function with ease.
You can find further information on the purpose and scope of the data collected and their processing by the provider of the plug-in in the provider’s Data Protection Notices. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy.
5.2 LinkedIn Conversion Tracking
On our website, we use the analysis and conversion tracking technology of the LinkedIn platform, a service offered by LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2 (Ireland). With the help of this LinkedIn technology, you can be shown more relevant advertising, based on your interests. LinkedIn also provides us with aggregated and anonymous reports on advertising activities and information on how you interact with our website.
Please note that opting-out from such advertising does not remove ads from the website you access. It only means that the ads which you are shown are not necessarily oriented to your personal interests.
5.3 Facebook pixel and “Facebook Custom Audiences”
On this website we use the Facebook pixel provided by Facebook, a social media network operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Furthermore, the website uses the remarketing function “Custom Audiences” provided by Facebook Inc. (“Facebook”). This enables users of the website to be presented with interest-related advertisements (“Facebook Ads”) when they visit the social network Facebook or other websites that also use the process.
We use the marketing tool via a so-called Facebook pixel, which is integrated on our website. When you visit our website, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore provide you with the following information based on the state of our knowledge: through the integration of Facebook Custom Audiences, Facebook receives the information that you have accessed the page in question on our websites or clicked on one of our advertisements. If you are registered with a Facebook service, Facebook is able to link the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will find out and store your IP address and other identifying features. You can find out how the Facebook pixel is used for advertising campaigns at https://www.facebook.com/business/learn/facebook-ads-pixel.
In doing so, we are pursuing the objective of showing you advertising of interest to you in order to make our website more interesting to you.
The legal basis for processing your data is set out in Art. 6 para. 1 p. 1 (f) GDPR. The justified interest lies in direct mail marketing.
You can change your settings for advertisements in Facebook at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen, provided you are logged in to Facebook. You can disable the “Facebook Custom Audiences” feature (here) and for logged in users at https://www.facebook.com/settings/?tab=ads#_.
5.4 Incorporation of YouTube videos
We have incorporated YouTube videos in our website which are stored at http://www.YouTube.com and can be played directly from our website. These are incorporated in “extended data protection mode”. This means that data about you are transmitted to YouTube even if you do not play the videos. We have no control over this data transmission.
If you are logged on to Google, your data will be directly linked to your account. If you do not want your data to be associated with your YouTube profile, you must log out before clicking on the button. YouTube will store your data as a user profile and it will use them for the purpose of advertising, market research and/or adjusting the layout of its website. Any such evaluation is performed in particular to provide relevant advertising (even for users who are not logged in), and to inform other users of the social network of your activities on our website. You have the right to object to the creation of such user profiles but you must address YouTube in order to exercise this right.
You can find further information on the purpose and scope of the data collected and their processing by YouTube in the Data Protection Notice. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.
5.5 Xing button
Our website also uses the “share function” of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. If you click on the XING “Share Button” (plug-in), you will – if you are logged into your XING account – be redirected to your user account in a separate browser window and can share the electronic publication deposited on our website by adding a comment. The plug-in establishes a direct connection between your browser and the XING server. XING thereby receives information that you have visited our website using your IP address. We would like to point out that we have no knowledge of the content of the (personal) data transmitted or how XING uses it.
Our site also uses social plug-ins provided by Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plug-ins are marked with an Instagram logo, for example in the form of an “Instagram Camera”. When you access a page on our website that contains such a plug-in, your browser establishes a direct connection with Instagram's servers. The content of the plug-in is transmitted by Instagram directly to your browser and integrated in the page. This integration informs Instagram that your browser has accessed the relevant page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can immediately attribute your visit to our website to your Instagram account. When you interact with the plug-ins, for example by clicking the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts. If you do not want Instagram to attribute the information collected through our website directly to your Instagram account, you must log out of Instagram before visiting our website.
6. Erasure, blocking and duration of storage of personal data
We process and store your personal data only for the period of time required to fulfill the respective storage purpose or as required by the various retention periods stipulated by law.
After a storage purpose has ceased to exist or after the retention period provided for by law has expired, the personal data is routinely blocked or erased for further processing in accordance with statutory provisions.
7. Data protection rights of the data subject
If you have any questions about your personal data, you can contact us in writing at any time. You have the following rights according to GDPR:
8. Legal basis for processing
When processing personal data for which we obtain the consent of the data subject, Art. 6 Para. 1, Sentence 1 (a) of the General Data Protection Regulation (GDPR) serves as the legal basis.
When processing the personal data required for the fulfillment of a contract to which the data subject is a party, Art. 6 Para. 1, Sentence 1 (b) of the General Data Protection Regulation serves as the legal basis. This provision also covers processing operations which are necessary for the performance of pre-contractual measures.
Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 Para. 1, Sentence 1 (c) (GDPR) serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 Para. 1 Sentence 1 (f) (GDPR) serves as the legal basis for the processing. The legitimate interest of our company lies in the execution of our business activities as well as in the analysis, optimization and maintenance of the security of our website
9. Transmission of data to third parties
We only transfer data if there is a legal obligation to do so. This is the case if state institutions (e.g. criminal prosecution authorities) request information in writing or a court order is available.
Personal data is not transferred to so-called third countries outside the EU/EEA area.
10. Legal or contractual provisions on the provision of personal data and the possible consequences of not providing such data
We hereby point out that in certain cases (e.g. tax regulations) the provision of personal data is required by law or may result from contractual regulations (e.g. information on the contractual partner(s)). For example, it may be necessary for the conclusion of a contract that the person concerned/the contractual partner is required to provide their personal data so that their request (e.g. order) can be processed by us in the first place. An obligation to provide personal data arises primarily when a contract is concluded. If in this case no personal data is provided, the contract cannot be concluded with the person concerned. Prior to the provision of personal data by the data subject, the data subject may contact our Data Privacy Officer or the Data Controller. The Data Privacy Officer or the Controller then informs the data subject whether the provision of the required personal data is required by law or contract or is necessary for the conclusion of the contract and whether the data subject's concerns give rise to an obligation to provide the personal data or what the consequences are for the data subject if the required data is not provided.
11. Existence of automated decision making
As a responsible company, we refrain from automated decision making or profiling in our business relationships.
12. SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries or booking information that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
13. Data protection information regarding video and photo recordings
Design Offices GmbH (hereinafter: "Organizer") is the organizer of numerous events. In the course of the events, photographs and/or video recordings (hereinafter: "recordings") of the participants are made. Against this background, the Organizer informs the participants below about the processing of your personal data in accordance with Articles 13, 14 of the General Data Protection Regulation (GDPR):
13.1. Responsible party
The responsible party within the meaning of Art. 4 No. 7 DS-GVO is Design Offices GmbH
13.2. Purposes of data processing and legal basis
The recordings are produced and used for public relations purposes of the organizer. The legal basis of the processing is Art. 6 paragraoh 1 p. 1 lit. a DS-GVO, as you have consented to the processing of your recordings.
13.3. Categories of personal data
Recordings of the participants, place and time of the recordings
13.4. Recipients of the personal data
The organizer has commissioned internal external photographers to take the photographs . The external photographer processes your personal data exclusively in accordance with the order processing agreement concluded by the organizer with the photographer. The photographs will not be passed on to third parties.
13.5. Storage period
Photographs that are not used after the event will be deleted immediately. Photographs that are used will be stored for a maximum period of three years and then deleted.
13.6. Rights of the person depicted
The person depicted has the right to information (Art. 15 DSGVO), to correction or deletion (Art. 16 and 17 DSGVO), to restriction of processing (Art. 18 DSGVO) and to data portability (Art. 20 DSGVO). In addition, the data subject has the right to complain to a data protection supervisory authority about the data processing by the organizer.
14. Additional Information
In addition to these web-specific data protection notices, it is also possible to view our transparent information.