Privacy Policy
Below we inform you in detail about how we handle your data when you visit our website at https://www.myarchitecto.de (hereinafter referred to as the “Website”) and use the functions offered.
1. Controller
The controller within the meaning of data protection law is architecto by KA GmbH, a subsidiary of Küchen Aktuell GmbH, Senefelderstraße 2b | 38124 Braunschweig, phone number +49 (0)531 26134-5000, email address info@myarchitecto.de (hereinafter referred to as “architecto” or “we”).
2. Contact details of our Data Protection Officer
The contact details of our Data Protection Officer are as follows:
Email: datenschutzbeauftragter@kuechenaktuell.de
3. Access to our Website
We automatically collect and store so-called log file data that your browser transmits to us. This includes:
- browser type/version
- operating system
- URL of the previously visited website
- URL of the page you access on the Website
- IP address of the accessing device
- name and URL of the requested file
- volume of data transferred
- message whether the retrieval was successful
- as well as date and time of access to the Website.
The collection of this data is technically necessary. This data is not merged with other data sources. The use of the Website is unfortunately technically not possible without providing your IP address. Apart from this, this data is evaluated in anonymised form for statistical purposes and then deleted. Data is collected for pre-contractual purposes and/or based on our legitimate interest in displaying the content of the Website to you (Art. 6(1) sentence 1 lit. b), f) GDPR).
4. Cookies
architecto stores cookies on the storage medium of your device in order to make your visit to the Website more attractive and to enable the use of certain functions. This is done on the basis of your consent given via the entry banner (Art. 6(1) sentence 1 lit. a) GDPR). Technically necessary cookies are set on the basis of our legitimate interests pursuant to Art. 6(1) sentence 1 lit. f) GDPR.
Cookies are small text files that are sent by our web server to the browser of your device and stored on it. They contain data relating to user-specific settings on the Website. architecto does not store any personal data in cookies.
The cookies contain the following data sets:
| Name | Domain | Description | Storage period |
|---|---|---|---|
| VISITOR_PRIVACY_METADATA | Youtube.com | This cookie is used to store the user’s consent and privacy options regarding their interaction with the website. It records data on the visitor’s consent to various privacy policies and settings and ensures that their preferences are taken into account in future sessions. | 5 months 4 weeks |
| _ga | www.google-analytics.com | Registers a unique ID that is used to generate statistical data on how the visitor uses the website. | 2 years |
| _ga_# | www.google-analytics.com | Collects data on how often a user visits a website as well as data for the first and most recent visit. Used by Google Analytics. | 2 years |
| _cf_bm | Hubspot.com | This cookie is used to distinguish between humans and bots. | 30 minutes |
| _hssc | .myarchitecto.de | This cookie is associated with websites hosted on the HubSpot platform and is used by the website for analytical purposes. | 30 minutes |
| _pk_id.1.6537 | .myarchitecto.de | This cookie name is associated with the open-source web analytics platform Piwik (Matomo). It helps website operators track visitor behaviour and measure website performance. It is a pattern-type cookie where the “_pk_id” prefix is followed by a short series of numbers and letters, which is presumably a reference code for the domain that sets the cookie. | 1 year |
| _pk_ses.1.6537 | .myarchitecto.de | This cookie name is associated with the open-source web analytics platform Piwik (Matomo). It helps website operators track visitor behaviour and measure website performance. It is a pattern-type cookie where the “_pk_ses” prefix is followed by a short series of numbers and letters, which is presumably a reference code for the domain that sets the cookie. | 30 minutes |
| _hstc | .myarchitecto.de | This cookie is associated with websites hosted on the HubSpot platform and is used by the website for analytical purposes. | 5 months 4 weeks |
| _hssrc | .myarchitecto.de | This cookie is associated with websites hosted on the HubSpot platform and is used by the website for analytical purposes. | For the duration of the website visit |
| YSC | .youtube.com | This cookie is set by YouTube to track views of embedded videos. | For the duration of the website visit |
| VISITOR_INFO1_LIVE | .youtube.com | This cookie is set by YouTube to track user preferences for embedded YouTube videos on websites. It can also detect whether the website visitor is using the new or the old version of the YouTube interface. | 5 months 4 weeks |
| _cfuvid | .hsforms.com | This cookie is used to track users across multiple sessions in order to optimise the user experience by maintaining session consistency and providing personalised services. | For the duration of the website visit |
| hubspotutk | .myarchitecto.de | This cookie name is associated with websites built on the HubSpot platform. According to HubSpot, its purpose is user authentication. As it is a persistent cookie and not a session cookie, it cannot be classified as strictly necessary. | 5 months 4 weeks |
| _cfuvid | .hubspot.com | This cookie is used to track users across multiple sessions in order to optimise the user experience by maintaining session consistency and providing personalised services. | For the duration of the website visit |
| _Secure-ROLLOUT_TOKEN | .youtube.com | This token manages the staged rollout of new features. | 5 months 4 weeks |
In most cases, the browser on your device is set to accept the creation and storage of cookies. You can configure your browser so that it generally rejects the storage and use of cookies or only does so in specific cases. In that event, however, the functionality of our Website may be limited.
4.1 Google Analytics
We use Google Analytics on our Website, a web analytics service provided by Google Ireland Ltd. (“Google”). Google uses cookies that enable an analysis of your use of the Website. Google Analytics records data that can be divided into various categories.
These include:
- Type of visitors: The tool collects data on regional origin and on the operating systems and devices used to access the Website.
- Traffic source: In this category, Google Analytics stores referring websites and provides information on which social networks visitors come from. If an AdWords account is linked to the Analytics account, data from the advertising programme can also be imported.
- Visitor behaviour on the Website: In this category, Google Analytics records landing pages, click paths, bounce rates and the time spent on individual subpages.
Google stores the data within the EU/EEA but reserves the right to process the data on servers in the USA as well. The USA is currently considered a country with an adequate level of data protection (see the adequacy decision of the EU Commission of 10 July 2023, C (2023) 4745 final), and Google LLC, USA, has been certified accordingly: https://www.dataprivacyframework.gov/list.
Google uses the generated information to evaluate your use of the Website, to compile reports on website activities for us and to provide us with other services related to the use of the Website and the Internet. We are joint controllers together with Google and have concluded a joint control agreement provided by Google via our Google account (https://support.google.com/analytics/answer/9012600).
Summary of the joint control agreement with Google:
- Each party is itself responsible for ensuring that there is a legal basis for its respective data processing.
- Data subject rights are implemented by Google insofar as the data processing is not carried out exclusively by us. To exercise your data subject rights, you may contact either us and/or Google.
- The reporting of data protection breaches under Art. 33 GDPR is carried out by Google. We are obliged to report directly if there is a suspicion of a data protection breach.
IP addresses are further processed in truncated form in order to exclude any direct personal reference. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
Via Google Analytics, we can request advertising reports on visitors to our Website. These reports contain anonymised statistical information on age, gender and interests of the visitors to our Website. Further information on this service is available at https://support.google.com/analytics/answer/3450482?hl=de_AT&utm_id=ad.
Independently of this, Google collects data in particular from users of a Gmail account, as Google is the provider of that service as well. You can change your advertising settings for this at https://adssettings.google.com/authenticated so that no activities and information are collected for personalised advertising.
You can prevent the storage of cookies by selecting the appropriate settings in your browser. You can also prevent the collection of the data generated by the cookie and related to your use of the Website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Alternatively, you can prevent the collection and use of your data by Google by clicking on the following link:
Disable Google Analytics
By clicking this link, an opt-out cookie will be set which prevents your data from being collected by Google. Further information on terms of use and data protection can be found at the following links:
https://www.google.com/analytics/terms/de.html
https://www.google.com/intl/de/analytics/learn/privacy.html
https://www.google.de/intl/de/policies/privacy
4.2 YouTube using iFrames
On our Website we link to our YouTube channel with corresponding videos. The provider of the website at https://www.youtube.com is Google. The videos are embedded via so-called inline frames (“iFrames”) using the extended data protection mode. An iFrame is an element that allows content from other websites to be embedded directly into our Website via HTML. Information is only collected by Google when you give your consent and watch the video. Once you have given consent, the cookies mentioned above are set. If you have already consented to video playback on another website, Google recognises this via the cookie that has been set. When you click on the video, Google receives the information from which website you are accessing the YouTube videos. If you are logged into your YouTube account, Google can assign your browsing behaviour to you personally. You can prevent this by logging out of your YouTube account beforehand. Further information on data protection at “YouTube” can be found in the privacy policy for this service, available at: https://www.google.de/intl/de/policies/privacy/. Data is collected on the basis of your consent (Art. 6(1) sentence 1 lit. a) GDPR).
5. Careers
Under the “Careers” link you have the option of applying to us. The text fields marked with an asterisk are mandatory fields. They are used to assess whether you are generally suitable for an internal position within our company and to enable us to respond to your application. The provision of this data serves the purpose of carrying out pre-contractual measures (Art. 6(1) sentence 1 lit. b) GDPR) and for recruitment purposes (Art. 26 BDSG – German Federal Data Protection Act). The information provided in the remaining text fields is voluntary and will also be used for the aforementioned purposes if provided.
Without providing the mandatory information, we are unable to consider your application or respond to it. The failure to provide voluntary information has no consequences. If your application is successful, your data will be used for contractual purposes, namely the possible conclusion of an employment or training contract.
6. Contact form
Under the “Contact” link and at appropriate places on our Website you can fill in our contact form to send us a message. The form contains mandatory fields marked with an asterisk, such as your name, as well as optional fields. All data is used to respond to your enquiry and thus for pre-contractual purposes (Art. 6(1) sentence 1 lit. b) GDPR).
7. Statutory and contractual obligations to provide data
The provision of any data to us is neither contractually nor legally required.
Without providing the mandatory information, we are unable to consider your application or respond to it. The failure to provide voluntary information has no consequences.
8. Storage period and deletion of data
The personal data and file attachments stored on our web server that your browser transmits to us are deleted no later than 7 days after the end of your website visit, contact or appointment request, or application. The data that you provide to us for a contact request, appointment request or brochure order will be deleted once your request has been fully processed.
The contact details that you provide to us for an application will, in the event of a rejection, be deleted no later than 6 months after notification of the rejection. This does not apply if you give us your consent to be included in our applicant database. Data used on the basis of consent will be stored until the consent is revoked or until the agreed storage period expires.
The data that you provide to us in the context of a contact request via the form or, where applicable, also by email or telephone will be deleted as soon as we can assume that your enquiry has been resolved and no statutory retention periods apply. This is usually the case 3 months after the initial enquiry.
If data is required as evidence, it will be stored for the duration of the statutory limitation periods or the contractually agreed warranty periods. The limitation period can be up to 30 years, whereby the regular limitation period ends after 3 years.
9. Disclosure of your data / Source of your data
We only disclose your data to third parties if we are entitled or obliged to do so under applicable law. The same applies if we receive your data from third parties.
We are also entitled to do so if third parties process the data on our behalf: If we do not carry out our business activities ourselves (e.g. operation of the Website, creation and dispatch of advertising material, data analysis and, where applicable, data cleansing) but have them carried out by other companies and these activities involve the processing of your data, we have previously contractually obliged these companies to use the data only for the purposes legally permitted to us. We are authorised to monitor these companies in this respect.
The data we process originates exclusively from you and/or from the devices or services you use.
10. Our presence on social media (LinkedIn)
On our Website we refer via links to our publicly accessible profiles on social media.
Social networks such as LinkedIn can usually comprehensively analyse your user behaviour when you visit their apps or third-party services with integrated social media content (e.g. Like buttons or advertising banners). Visiting a social media presence triggers numerous data protection-relevant processing operations.
If you are logged into your social media account and visit our social media presence, the operator of the social media platform can associate this visit with your user account. Your personal data may, under certain circumstances, also be collected even if you are not logged in or do not have an account with the respective social media platform. In this case, data collection may take place, for example, via cookies stored on your device or through the collection of your IP address.
Using the data collected in this way, the operators of the social media platforms can create user profiles in which your preferences and interests are stored. This enables interest-based advertising to be displayed to you within and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising may be displayed on all devices on which you are or were logged in.
10.1 Legal basis
Our social media presences are intended to ensure the broadest possible presence and communication with all age groups in the online environment. This constitutes a legitimate interest within the meaning of Art. 6(1) sentence 1 lit. f) GDPR. The analysis processes initiated by the social networks may, however, be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6(1) sentence 1 lit. a) GDPR), in particular based on a separate contractual relationship with you and thus on Art. 6(1) sentence 1 lit. b) GDPR.
10.2 architecto’s LinkedIn account
architecto also operates its own account to present the company on the social media platform LinkedIn at the URL https://www.linkedin.com/company/architecto-by-k-chen-aktuell-gmbh/.
This platform is operated within the European Economic Area by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as “LinkedIn”) (https://www.linkedin.com/legal/impressum).
10.3 Data transfers to the USA
LinkedIn is part of a large corporate group whose parent company, LinkedIn Corp., is based in the USA. LinkedIn reserves the right to transfer and store data in the USA. The USA is currently considered a country with an adequate level of data protection (see the adequacy decision of the EU Commission of 10 July 2023, C (2023) 4745 final), and LinkedIn Corporation has been certified accordingly: https://www.dataprivacyframework.gov/list.
10.4 LinkedIn privacy information
The LinkedIn privacy policy at https://www.linkedin.com/legal/privacy-policy and the cookie policy at https://www.linkedin.com/legal/cookie-policy provide information about how LinkedIn processes your data. architecto has no influence over and cannot control this data processing. In particular, private messages are processed by LinkedIn and analytics tools are used, enabling LinkedIn to infer your preferences and interests and determine your location via your IP address and GPS data. This data can be used to send or display targeted advertising. Such data is not made available to architecto. Any data subject rights in this regard should therefore be asserted directly against LinkedIn.
architecto only receives personal data about you to the extent that you actively connect with us via your profile or follow architecto. In that case, we only receive the information that you have chosen to make public to your contacts.
10.5 LinkedIn settings and contact options
Further important information and settings for the LinkedIn service are available at:
| Action / Information | Link |
|---|---|
| Contact | https://www.linkedin.com/help/linkedin/solve |
| Change privacy and security settings | https://www.linkedin.com/psettings/ |
| View personalisation data and change advertising settings | https://www.linkedin.com/psettings/advertising/profile-data |
| Option to block LinkedIn accounts | https://www.linkedin.com/psettings/data-log |
11. Your rights
You may object to the processing of your personal data by us at any time. In addition to the direct contact options listed below, you can also exercise your right to object by automated means using technical specifications.
You also have the right at any time to obtain information free of charge about the data stored about you, to have incorrect data corrected and to have data restricted in its processing or deleted. Furthermore, you have the right to receive your data in a structured, commonly used and machine-readable format and to have your data transmitted by us to another controller. In addition, you have the right to revoke any consent you have given with effect for the future. The lawfulness of data processing carried out on the basis of your consent up to the time of revocation remains unaffected.
You can address your respective request to us by using the contact details provided in sections 1 or 2.
In addition to the rights mentioned above, you also generally have the right to lodge a complaint with a data protection supervisory authority.