Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

30 doradus media design gmbh
Niederstr. 29, 40789 Monheim am Rhein, Germany
Represented by managing director Jürgen Osterberg
Phone: +49 (0)2173 109267-0
Email: info@apogee-coworking.de

Further details can be found in our Legal notice.

2. What this website doesn't do

So you can put the rest into context, here's what we deliberately don't do first:

• No advertising networks, no remarketing, and no sharing of your data with advertisers or data brokers.
• No fonts, icons or scripts from third-party providers. Fonts and icons are hosted on our own server; no connection to Google, Adobe or comparable services is established.
• No maps, videos or social media embeds that would transmit data to third parties when the page loads.
• No transfer of your data to countries outside the European Union.
• Traffic measurement runs on a server we operate ourselves — no external analytics provider is involved.

3. Accessing the website and server logs

Each time you access the site, your browser transmits technically necessary information, which our hosting provider stores in what are known as server log files. This includes the address accessed, the date and time, the amount of data transferred, whether the request was successful, your browser type and version, your operating system, the previously visited page, and your IP address.

This processing serves the secure and reliable operation of the site and the defence against attacks. The legal basis is our legitimate interest under Article 6(1)(f) GDPR. The logs are deleted after seven days at the latest, except for entries needed to investigate a specific incident.

The website is hosted on servers located in Germany. We have a data processing agreement with our hosting provider under Article 28 GDPR.

4. Encryption

This website is delivered over an encrypted connection (TLS). You can tell by the “https” in your browser's address bar. This means form submissions cannot be read by third parties while in transit.

5. Contact and room-enquiry forms

If you write to us using one of our forms, we process the information you provide: name and email address as required fields, plus company, phone number and your message on a voluntary basis. The room-enquiry form additionally asks for your preferred room, preferred date and number of people.

We use this information solely to answer your enquiry and to handle the matter with you. The legal basis is Article 6(1)(b) GDPR where this concerns entering into or performing a contract, and otherwise our legitimate interest in responding to enquiries under Article 6(1)(f) GDPR.

Your message is delivered by email to our inbox. It is not passed on to third parties. We delete enquiries once they have been dealt with and no statutory retention periods apply; we review the need to keep them at least every two years.

Protection against automated submissions

To prevent the forms from being misused by automated programs, we store a one-way, non-reversible hash of your IP address for a maximum of one hour. This lets us limit the number of submissions per connection. The legal basis is our legitimate interest in preventing abuse under Article 6(1)(f) GDPR. The IP address itself is not stored, and the hash is automatically deleted once it expires.

If your submission is incomplete or sending fails, we temporarily store your entries on the server for a maximum of five minutes so the form doesn't come back empty. They are then deleted automatically.

6. Contact by phone or email

If you call us or email us directly, we process your information to handle your request. The same legal bases and retention periods apply as for the forms.

7. Cookies and your consent

The first time you visit this website, a notice appears in which you decide whether we may analyse your visit statistically. Without your consent, no traffic measurement takes place and no cookies are set for that purpose.

Regardless of your decision, we store your choice itself in a cookie — otherwise we would have to ask you again on every page you open. Likewise, a cookie remembers which language version of the website you have chosen. This storage is strictly necessary for operating the website and requires no consent under Section 25(2) No. 2 TDDDG. Further strictly necessary cookies are created when someone logs into the website's administration area.

Which cookies are set in detail — with their names, purposes and storage periods — is listed on an ongoing basis in our Cookie Policy. This overview is kept up to date automatically.

You can withdraw consent at any time with effect for the future — just as easily as you gave it. Simply open the cookie settings via the corresponding link at the bottom of the page and change your selection. Any traffic-measurement cookies already set are removed in the process and measurement stops. The legal basis for withdrawal is Article 7(3) GDPR.

8. Traffic measurement with Matomo

If you have given your consent, we analyse the use of this website with the Matomo analytics software. Matomo is open-source software that we run on our own server environment at metrics.30doradus.de. Like the website itself, this server environment is rented from our hosting provider, with whom we have concluded a data processing agreement under Article 28 GDPR. No external analytics service provider that accesses or analyses the collected data on its own account is involved; the data never leaves our own sphere of responsibility.

The data processed includes in particular: the pages you view and how long you stay, the time of your visit, the previously visited page or the search term used, information about your browser, operating system and screen resolution, your approximate country of origin, and your IP address.

What we use this for — and what it means for you

We use this analysis for two purposes. First, to understand which content is in demand and where our website should be improved. Second, to recognise the environment from which our website is accessed, and to identify potential parties interested in what we offer.

To make this possible, we store your IP address in full, without truncation. In the case of a business internet connection, it is often possible to infer the company from which the visit originated. Where relevant, we make this attribution ourselves on a case-by-case basis, for example by querying publicly accessible directories. No automated procedure and no service provider specialising in this is involved.

We use these insights solely to approach potential interested parties ourselves. This data is neither shared with nor sold to third parties.

Legal basis and storage period

The legal basis for both storing cookies on your device and the subsequent processing is solely your consent under Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR. Without your consent, Matomo is not loaded and no data is collected.

The data collected is deleted as soon as it is no longer required for our analysis purposes. The storage periods of the cookies used can be found in the Cookie Policy.

9. Your rights

You have the following rights against us regarding the personal data concerning you:

• Access to the data processed (Article 15 GDPR)
• Rectification of inaccurate data or completion of incomplete data (Article 16 GDPR)
• Erasure (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Objection to processing based on legitimate interest (Article 21 GDPR)
• Withdrawal of any consent given, with effect for the future (Article 7(3) GDPR)

An informal message to info@apogee-coworking.de is sufficient to exercise these rights.

10. Right to lodge a complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
www.ldi.nrw.de

11. No transfers to third countries

Your data is not transferred to countries outside the European Union in connection with this website.

12. No automated decision-making

No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place. The attribution of a visit to a company described under section 8 is carried out manually on a case-by-case basis and has no legal effect on you.

13. Changes

We will update this policy whenever the legal situation or the processing carried out on this website changes. The version published here is always the one that applies.