Privacy Policy
This Privacy Policy applies to data processing by Building Radar GmbH (“Building Radar”, “Controller”, “we” or “us”).
We are pleased that you are visiting our website and are interested in our company. In the following Privacy Policy, we would like to inform you about the personal data that is collected and processed when you visit our website https://buildingradar.com (“Website”) as well as about your rights.
Personal data is any information relating to an identified or identifiable natural person, e.g. name, address, and e-mail address. When processing your personal data, we observe the applicable data protection laws, especially the provisions of the General Data Protection Regulation (“GDPR”) and applicable local data protection laws.
This Privacy Policy describes which personal data we process, for which purposes and on which legal basis.
1. Name and Contact Details of the Controller
Your data is processed by the following data controller:
Building Radar GmbH
represented by the Managing Directors Paul Indinger and Leopold Neuerburg
Erika-Mann-Straße 63, 80636 Munich, Germany
Email: info@buildingradar.com
2. Name and Contact Details of the Data Protection Officer
If you have any questions relating to data protection (including the collection, processing and your rights in accordance with section 8 of this Privacy Policy) you can contact our data protection officer:
ER Secure GmbH
In der Knackenau 4
82031 Grünwald
E-Mail: datenschutzbeauftragter@buildingradar.com
3. Collection and Storage of Personal Data as well as Method and Purpose of their
Processing, relevant Legal Basis and Storage Period
3.1. Informative Use of our Website (Automatically Collected Data)
During the mere informative use of our Website, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called server log files), whereby logging only takes place to the technically necessary extent. The following information is collected:
- Name of the Website accessed,
- File, date and time of retrieval,
- Volume of data transferred,
- Notification of successful retrieval,
- Browser type and version,
- Operating system of the user,
- Referrer URL (the website from which the access is made),
- IP address and the requesting provider,
- When the Website is accessed via a mobile device: country code, language, name of device, name of operating system and version
The legal basis for the collection of this data is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in collecting this data results from the following purposes:
- ensuring optimal use of our Website,
- ensuring smooth connection establishment,
- evaluation of system security and stability.
3.2. Additional Services and Career Opportunities
The provision of further (additional) personal data is voluntary. There will not be any negative consequences for you if you do not provide us with further personal data. However, within the scope of each of the following processing procedures, we as controller need your personal data in order to be able to act. In these cases, we cannot provide the service you request without using the personal data required for this purpose.
3.2.1. Contact
3.2.1.1. Contact
If you contact us by the “Contact” section on our Website, your email address as well as your name and the personal data contained in the message will be transmitted to and processed by us. The personal data is only processed to respond to your inquiry.
We use your data exclusively for the purpose of answering your inquiry. The legal basis for this is Art. 6 para. 1 lit. f) GDPR (legitimate interest of processing inquiries and other requests). Your data will be deleted after processing your request unless further storage is necessary, e.g. when we have concluded a contract with you. In this case we process your data on the basis of Art. 6 para. 1 lit. b) GDPR.
3.2.1.2. Newsletter
If you subscribe to our mailing list, we process your name as well as email address to add you to our mailing subscription list.
We process the aforementioned data to provide you with the latest news about our services on the basis of your consent in accordance with Art. 6 para. 1 lit. a) GDPR.
3.2.2. Career Opportunities
If you are interested in a professional career with us, you have the opportunity to apply. If you submit your application documents such as cover letter, CV and certificates/references in digital form for this purpose, we will process the personal data submitted as part of the application process for the purpose of deciding on whether to establish an employment relationship with you, including notification of acceptance or rejection. The legal basis for processing your data for this purpose is Article 88 GDPR in conjunction with sec. 26 para. 1 Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).
If we enter into an employment relationship with you, we will process your personal data that we processed as part of the hiring process also for the purpose of carrying out or terminating the employment relationship. In this case, the legal basis is Article 88 GDPR in conjunction with sec. 26 para. 1 BDSG. The related data protection information for our employees will be provided separately and is not the subject of this Privacy Policy.
Furthermore, we process your personal data we collected as part of the application process also for the purpose of complying with legal obligations on the basis of Art. 6 para. 1 lit. c) GDPR as well as on the basis of Art. 6 para. 1 lit. f) GDPR to protect our legitimate interests, namely to establish, exercise and/or defend legal claims (e.g. in relation to possible claims that may arise from the General Act on Equal Treatment (Allgemeines Gleichstellungsgesetz – AGG)).
If your application documents contain special categories of personal data within the meaning of Art. 9 para. 1 GDPR, we will assume that you expressly consent to their processing within the meaning Art. 9 para. 2 lit. a) GDPR unless another exception applies in a specific case (e.g. Art. 9 para. 1 lit. b) GDPR in conjunction with sec. 26 subs. 3 BDSG or Art. 9 para. 2 lit. h) GDPR in conjunction with sec. 22 subs. 1 first sentence lit. b) BDSG).
If we reject your application, your data will be deleted 6 months after this point in time pursuant to sec. 61b subs. 1 German Labour Court Act (Arbeitsgerichtsgesetz – ArbGG) in conjunction with sec. 15 AGG unless further processing of these data is necessary for the purposes of establishing and/or defending legal claims. The data of applicants we hire are processed for as long as is necessary to establish, perform or terminate the employment relationship.
3.3. Website Optimisation and Website Analysis
3.3.1. Functional Cookies
Our Website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on your computer. The cookie contains a string of characters that allows your system to be uniquely identified when you return to the Website.
Most of the cookies we use (“Session Cookies”) and the data stored and transmitted in them are automatically deleted at the end of your visit. Other cookies (“Persistent Cookies”) remain stored on your end device until you delete them.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of cookies when closing the browser. You can delete cookies that have already been saved at any time. If you deactivate cookies, the functionality of the Website may be limited.
Some elements of our Website require that the calling browser can be identified even after a page change. Cookies may be stored for this purpose, which enable us to recognise your browser on your next visit.
If personal data are processed by the cookies, we process them on the basis of a balancing of interests pursuant to Art. 6 para. 1 lit. f) GDPR, which always also takes your interests into account.
3.3.2. Analysis Cookies
When you visit our Website, cookies are also set that enable an analysis of your use of the Website for reach measurement (“Analysis Cookies”).
We use Analysis Cookies exclusively on the basis of your consent in accordance with § 25 para. 1 TTDSG and Art. 6 para. 1 lit. a) GDPR via our cookie banner. You can also access further information about the cookies we use via our cookie banner. You can also use the cookie banner to revoke your consent to the processing of your data through Analysis Cookies at any time.
3.3.2.1. Google Analytics
For the analysis of your use of our Website, we use “Google Analytics” “Google AdWords” and “Google Remarketing” (together “Google Services”), services of the Google LLC group, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), on the basis of a data processing agreement pursuant to Art. 28 GDPR.
Google Services use cookies. The information generated by cookies about your use of our Website is usually transferred to a Google server in the USA and stored there. The storage of Google Services cookies and the use of this analysis tool are based on your express consent in accordance with Art. 6 para. 1 lit. a) GDPR. Your consent can be revoked at any time.
We have activated the IP anonymisation function. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Google will use this information on our behalf for the purpose of evaluating your use of the Website, compiling reports on Website activity and providing other services relating to Website activity and Internet usage.
You have the option to prevent the storage of cookies by changing the settings of your browser software accordingly. You can also prevent the collection of data generated by the cookie and related to your use of the Website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For more information about the processing of user data by Google Services, please refer to Google’s privacy policy at: https://support.google.com/analytics/answer/6004245?hl=en.
3.3.2.2. Cookies
The aforementioned cookies are in particular:
Building Radar Cookies
Name: Borlabs Cookie
Provider: Owner of this website, imprint
Purpose: Saves the settings of the visitors selected in the Cookie Box of Borlabs Cookie.
Cookie name: borlabs-cookie
Cookie : 1 year
Name: wordpress_test_cookie
Provider: buildingradar.com
Purpose: Used to check whether the user’s browser supports cookies.
Cookie name: wordpress_test_cookie
Cookie : Session
Name: li_gc
Provider: LinkedIn
Purpose: Saves the user’s consent status for cookies on the current domain.
Cookie name: li_gc
Cookie : 2 years
Name: __cfduid
Provider: buildingradar.com
Purpose: Used by the Cloudflare content network to identify trusted web traffic.
Cookie name: __cfduid
Cookie : 29 days
Name: __cfruid
Provider: buildingradar.com
Purpose: This cookie is part of Cloudflare’s services – including load balancing, providing website content and providing a DNS connection for website operators.
Cookie name: __cfruid
Cookie : Session
Name: JSESSIONID
Provider: New Relic
Purpose: Retains the user’s states for all page requests.
Cookie name: JSESSIONID
Cookie : Session
Name: _dc_gtm_UA-#
Provider: Google Tag Manager
Purpose: Used by Google Tag Manager to control the loading of the Google Analytics script tag.
Cookie name: _dc_gtm_UA-#
Cookie : 1 day
Name: _ga
Provider: Google Tag Manager
Purpose: Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
Cookie name: _ga
Cookie : 2 years
Name: _gat
Provider: buildingradar.com
Purpose: Used by Google Analytics to limit the request rate.
Cookie name: _gat
Cookie : 1 day
Name: _gid
Provider: Google Tag Manager
Purpose: Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
Cookie name: _gid
Cookie : 1 day
Name: collect
Provider: Google
Purpose: Used to send data to Google Analytics about the visitor’s device and behavior. Captures the visitor across devices and marketing channels.
Cookie name: collect
Cookie : Session
Name: jserrors/1/#
Provider: New Relic
Purpose: Pending
Cookie name: jserrors/1/#
Cookie : Session
Name: lang [x2]
Provider: LinkedIn
Purpose: Set by LinkedIn when a web page contains an embedded “Follow us” window.
Cookie name: lang [x2]
Cookie : Session
Name: wp-wpml_current_language
Provider: buildingradar.com
Purpose: Designates the country code calculated based on the user’s IP address. Used to determine which language to use for users.
Cookie name: wp-wpml_current_language
Cookie : 1 day
Name: eventevents/1/#
Provider: New Relic
Purpose: Pending
Cookie name: events/1/#
: Session
Name: __hssc
Provider: buildingradar.com
Purpose: Collects statistical data on user website visits, such as the number of visits, average time spent on the website and which pages were loaded. The purpose is to segment website users by factors such as demographics and geographic location so that media and marketing agencies can structure and understand their audiences to enable tailored online advertising.
Cookie name: __hssc
: 1 day
Name: __hssrc
Provider: buildingradar.com
Purpose: Collects statistical data on user website visits, such as the number of visits, average time spent on the website and which pages were loaded. The purpose is to segment website users by factors such as demographics and geographic location so that media and marketing agencies can structure and understand their audiences to enable tailored online advertising.
Cookie name: __hssrc
: Session
Name: __hstc
Provider: buildingradar.com
Purpose: Collects statistical data on user website visits, such as the number of visits, average time spent on the website and which pages were loaded. The purpose is to segment website users by factors such as demographics and geographic location so that media and marketing agencies can structure and understand their audiences to enable tailored online advertising.
Cookie name: __hstc
: 1 year
Name: __ptq.gif
Provider: Hubspot
Purpose: Sends data about the visitor’s device and behavior to the Hubspot marketing platform. Tracks the visitor across devices and marketing channels.
Cookie name: __ptq.gif
: Session
Name: _fbp
Provider: buildingradar
Purpose: Used by Facebook to display a range of advertising products, for example real-time bids from third party advertisers.
Cookie name: _fbp
: 3 Months
Name: _gcl_au
Provider: Google Tag Manager
Purpose: Used by Google AdSense to experiment with advertising efficiency on websites that use their services.
Cookie name: _gcl_au
: 1 year
Name: ads/ga-audiences
Provider: Google
Purpose: Used by Google AdWords to re-engage visitors who are likely to be exciting based on their previous online visitor behaviour on other websites.
Cookie name: ads/ga-audiences
: Session
Name: bcookie
Provider: LinkedIn
Purpose: Used by the social networking service LinkedIn for tracking the use of embedded services.
Cookie name: bcookie
: 2 Years
Name: bscookie
Provider: LinkedIn
Purpose: Used by the social networking service LinkedIn for tracking the use of embedded services.
Cookie name: bscookie
: 2 Years
Name: fr
Provider: Facebook
Purpose: Used by Facebook to display a range of advertising products, for example real-time bids from third party advertisers.
Cookie name: fr
: 3 Months
Name: hubspotutk
Provider: buildingradar.com
Purpose: Sets a unique ID for the session. This allows the website to obtain data about visitor behaviour for statistical purposes.
Cookie name: hubspotutk
: 1 year
Name: IDE
Provider: Google Inc.
Purpose: Used by Google DoubleClick to record and report the user’s actions on the website after viewing or clicking on one of the provider’s ads, for the purpose of measuring the effectiveness of an advertisement and displaying targeted advertising to the user.
Cookie name: IDE
: 1 year
Name: lidc
Provider: LinkedIn
Purpose: Used by the social networking service LinkedIn for tracking the use of embedded services.
Cookie name: lidc
: 1 day
Name: lissc
Provider: LinkedIn
Purpose: Used by the social networking service LinkedIn for tracking the use of embedded services.
Cookie name: lissc
: 1 year
Name: pagead/1p-user-list/#
Provider: Google
Purpose: Used to track whether the visitor has shown interest in certain products or events on multiple websites and how the visitor navigates between websites – This is used to measure advertising efforts and facilitates the payment of referral fees between websites.
Cookie name: pagead/1p-user-list/#
: Session
Name: pagead/landing
Provider: Google Inc.
Purpose: Collects data on visitor behaviour across multiple websites to present more relevant ads – This also allows the website to limit the number of times the same ad is displayed.
Cookie name: pagead/landing
: Session
Name: RUL
Provider: Google
Purpose: Pending
Cookie name: RUL
: 1 year
Name: test_cookie
Provider: Google
Purpose: Used to check whether the user’s browser supports cookies.
Cookie name: test_cookie
: 1 day
Name: tr
Provider: Facebook
Purpose: Used by Facebook for analysis and marketing purposes so that the Facebook Connector works.
Cookie name: tr
: Session
Name: UserMatchHisto
Provider: LinkedIn
Purpose: Used to track visitors across multiple websites to present relevant advertising based on the visitor’s preferences.
Cookie name: UserMatchHisto
: 29 dayas
Name: Facebook
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Purpose: Used to unblock Facebook content.
Cookie name: Facebook
:
Name: Google Maps
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Used to unblock Google Maps content.
Cookie name: NID
: 6 Month
Name: Instagram
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Purpose: Used to unblock Instagram content.
Cookie name: pigeon_state
: Session
Name: OpenStreetMap
Provider: Openstreetmap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom
Purpose: Used to unblock OpenStreetMap content.
Cookie name: _osm_location, _osm_session, _osm_totp_token, _osm_welcome, _pk_id., _pk_ref., _pk_ses., qos_token
: 1-10 Years
Name: Twitter
Provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland
Purpose: Used to unblock Twitter content.
Cookie name: __widgetsettings, local_storage_support_test
: Unlimited
Name: Vimeo
Provider: Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA
Purpose: Used to unblock Vimeo content.
Cookie name: vuid
: 2 Years
Name: YouTube
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Used to unblock YouTube content.
Cookie name: NID
: 6 Month
4. Storage Period
We process and store your personal data only for the period necessary to achieve the aforementioned purposes or as far as this is granted or demanded by the European legislator or other legislators in laws or regulations to which we are subject to. In case we have concluded a contract with you regarding the provision of services we store your data as long as it is necessary for the processing of the existing agreement with you, i.e. until the expiry of the statutory or possible contractual warranty rights. After expiry of this period, we retain the information of the contractual relationship as long as this is required under applicable commercial and tax law.
5. Recipients or categories of recipients of your personal data
We sometimes use external service providers to process your data (e.g. IT service providers). In part these service providers process your personal data as data processors on our behalf, in accordance with our instructions and under our supervision exclusively for the purposes described in this Privacy Policy according to Art. 28 GDPR, in part they act as independent data controllers. In the last case we only forward your personal data if necessary for the fulfillment of the contract, in which case the legal basis for the transfer is Art. 6 para. 1 lit. b) GDPR.
6. Social plugins
On our website we offer you the possibility of using so-called “Social-Media-Buttons”. To protect your data, we rely on the “Shariff” solution for implementation. This means that these buttons are only included on the website as a graphic containing a link to the corresponding website of the button provider. By clicking on the graphic you will be forwarded to the services of the respective provider. Only then will your data be sent to the respective providers. If you do not click on the graphic, there is no exchange between you and the providers of the social media buttons. Information about the collection and use of your data in the social networks can be found in the respective terms of use of the
respective providers. More information about the Shariff solution can be found here: http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html
We have integrated the social media buttons of the following companies on our website:
Facebook Inc. (1601 S. California Ave – Palo Alto – CA 94304 – USA)
Twitter Inc. (795 Folsom St. – Suite 600 – San Francisco – CA 94107 – USA)
LinkedIn Corporation (2029 Stierlin Court – Mountain View – CA 94043 – USA)
7. Transfer of Data to Third Party Countries
Your personal data may be transferred or disclosed to third party companies which can be located outside the European Economic Area (EEA), i.e. in third countries. This concerns the use of the following services:
- Google: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Insofar as data is transferred to a third country, for which there is no adequacy decision by the Commission, this will take place on the basis of Standard Contractual Clauses pursuant to Art. 46 para. 2 lit. c) GDPR in conjunction with appropriate technical and organizational measures to protect your data.
8. Data Security
All personal data transmitted by you is transferred using the secure and proven SSL (Secure Socket Layer) standard. We also use appropriate technical and security measures to protect stored personal data against manipulation, partial or complete loss and unauthorized access by third parties. Our security measures are continuously improved in line with technological developments. In particular, we ensure that sensitive personal data is only stored on servers hosted in the EU that are certified in accordance with DIN ISO/IEC 27001 (as amended from time to time).
9. Your Rights
In relation to our processing of your personal data, you are entitled to the following rights free of charge:
9.1. Right to Information pursuant to Art. 15 GDPR
You have the right to receive information from us about whether and which data we process about you. This includes information on how long and for what purpose we process the data, the source of the data and the recipients or categories of recipients to whom we pass on the data. We can also provide you with a copy of this data.
9.2. Right to Rectification pursuant to Art. 16 GDPR
You have the right to request that we rectify information about you that is not or no longer accurate without delay. In addition, you can request that we complete your incomplete personal data. If required by law, we will also inform third parties of this rectification if we have disclosed your personal data to them.
9.3. Right to Deletion pursuant to Art. 17 GDPR
You have the right to request that we delete your personal data without delay if one of the following cases applies:
- Your data is no longer necessary for the purposes for which it was collected or otherwise processed or the purpose has been achieved;
- You withdraw your consent and there is no other legal basis for the processing;
- You object to the processing and there are no prevailing legitimate grounds for the processing; in the case of the use of personal data for direct marketing, a mere objection by you to the processing is sufficient;
- Your personal data has been processed unlawfully;
- The deletion of your personal data is necessary to comply with a legal obligation under European Union law or the law of a member state to which we are subject.
Your right to deletion may be restricted on the basis of statutory provisions. This includes in particular the restrictions listed in Article 17 GDPR and Section 35 BDSG.
9.4. Right to the Restriction of Processing pursuant to Art. 18 GDPR
You have the right to request us to restrict the processing of your personal data if one of the following reasons applies:
- you dispute the correctness of your personal data for a period of time that allows us to verify the correctness of the personal data;
- the processing is unlawful and you object to the deletion of the personal data and request instead the restriction of the use of your personal data;
- we no longer need your personal data for the purposes of processing; however, you need them for the assertion, exercise or defence of legal claims, or
- you have objected to the processing as long as it has not yet been determined whether our legitimate reasons outweigh yours.
If you have obtained a restriction on processing under the above list, we will inform you before the restriction is withdrawn.
9.5. Right to Data Portability pursuant to Art. 20 GDPR
You have the right to obtain personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to others. The exercise of this right does not affect your right to deletion.
9.6. Right to Object pursuant to Art. 21 GDPR
According to Art. 21 GDPR, you have in particular the right to object to the processing of your data at any time on the grounds of your particular situation, if we base this processing on legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR. If you object, we will no longer process your personal data, except in two cases:
- We can prove that there are compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms; or
- the processing serves the assertion, exertion or defence of legal claims.
In particular, if we process your personal data for direct marketing, you have the right to object at any time to the processing of your data for the purpose of such marketing. If you object to the processing of your data for direct marketing purposes, we will no longer use your personal data for this purpose.
9.7. Right of Withdrawal of Consent pursuant to Art. 7 GDPR
You can withdraw your consent given to us at any time with effect for the future. This withdrawal can be made in the form of an informal notification to the above-mentioned contact addresses. If you withdraw your consent, the legitimacy of the data processing carried out up to that point will not be affected.
9.8. Right to file a Complaint with the Supervisory Authority
If you believe that the processing of your data by us violates applicable data protection law, you have the right to file a complaint with one of the competent supervisory authorities. The supervisory authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Postfach 1349
91504 Ansbach
Germany
Phone: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
E-Mail: poststelle@lda.bayern.de
10. Automated Individual Decision-Making including Profiling pursuant to Art. 22 GDPR
We do not process your data for automated decisions in individual cases, including profiling within the meaning of Art. 22 GDPR.
Latest update: September 2024