Privacy Policy

The protection of your personal data is very important to us. We would therefore like to take this opportunity to inform you about data protection in our company. Your personal data will only be used in accordance with the statutory data protection regulations, such as the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG). Our employees and service providers are obliged to comply with data protection regulations. Below you will find information on the type, scope and purpose of the collection and use of your personal data as well as your rights.

Name and address of the person responsible

The respnsible person within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is

HR Infinity GmbH

Hauptstraße 66
12159 Berlin
Germany

Telephone: +49 (0)30 / 773 27 80 – 0
E-Mail: info@hrgroup-art.com

Contact details of the data protection officer

The data protection officer of HR Infinity GmbH is

Intersoft consulting services AG

Beim Strohhause 17
20097 Hamburg
Germany
Telefon: +49 40 790 235-0
E-Mail: dataprivacy@hrg-hotels.com

General Privacy Policy information

Scope of the processing of personal data

We only process our users’ personal data insofar as this is necessary to provide a functional website and our content and services. The processing of our users’ personal data only takes place regularly with the user’s consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is required by law.

Legal basis for the processing of personal data

  • Consent: Art. 6 para. 1 sentence 1 lit. a DSVGO – if the data subject has given consent.
  • Performance of a contract: Art. 6 para. 1 sentence 1 lit. b DSVGO – if the processing is necessary for the performance of a contract.
  • Legal obligation: Art. 6 para. 1 sentence 1 lit. c DSVGO – if the processing is necessary to fulfill a legal obligation.
  • Vital interests: Art. 6 para. 1 sentence 1 lit. d DSVGO – if processing is necessary to protect vital interests.
  • Legitimate interest: Art. 6 para. 1 sentence 1 lit. f DSVGO – if processing is necessary for the purposes of a legitimate interest, except where such interests are overridden by the interests or fundamental rights of the data subject.

Data erasure and storage duration

Personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data will only be stored beyond this point if this is required by European or national law. The data will also be deleted if a legally prescribed storage period expires, unless further storage is required to fulfill a contract.

Protecting privacy in telecommunications and digital services

The Telecommunications Digital Services Data Protection Act (TDDDG) codifies the principles previously established by case law on consent to the storage of information on end devices and regulates the legality of access to existing information. Insofar as consent within the meaning of Art. 6 para. 1 DSVGO is mentioned as the legal basis in the context of the processing listed in this data protection declaration, this also constitutes consent within the meaning of Section 25 para. 1 TDDDG. If no consent is required for the processing of the information, for example because access to information already stored in the end user’s terminal equipment is absolutely necessary so that the controller can provide you with a digital service such as the website, Art. 25 para. 2 TDDDG must also be mentioned as the legal basis.

Rights of the data subjects

If your personal data is processed, you are a data subject within the meaning of the DSVGO and you have the following rights vis-à-vis the controller:

Right to information (Art. 15 DSVGO)

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right to information about this data.

Right to rectification (Art. 16 DSVGO)

If your personal data is incorrect or incomplete, you have the right to request immediate correction or completion of the personal data.

Right to erasure (“right to be forgotten”) (Art. 17 DSVGO)

If one of the reasons listed in Art. 17 DSVGO applies, you have the right to demand that your personal data be deleted immediately.

Right to restriction of processing (Art. 18 DSVGO)

If one of the conditions listed in Art. 28 DSVGO is met, you have the right to request that the processing of your personal data be restricted.

Right to data portability (Art. 20 DSVGO)

You have the right to receive your personal data in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.

Right to object to certain data processing (Art. 21 DSVGO)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) DSVGO. This also applies to profiling based on these provisions.

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing.

You can send your objection to the following e-mail address: info@hrgroup-art.com.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 DSVGO if you consider that the processing of personal data relating to you infringes the DSVGO.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 DSVGO.

E-Mail Contact

Description and scope of data processing

It is possible to contact us via the e-mail address provided on our website. In this case, the personal data transmitted with the e-mail will be stored. The data is used exclusively for processing the conversation.

Purpose of data processing

The processing of the data serves to process the contact and the associated communication.

Legal basis for data processing

The legal basis for the processing of the data transmitted in the course of sending an email is Art. 6 para. 1 lit. f DSVGO. Our legitimate interest is to process and respond to your request. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSVGO.

Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation has ended and the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

Possibility of objection

If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.

Hosting

The website is hosted on servers of a service provider commissioned by us.

Our service provider is:

Kinsta Inc.
8605 Santa Monica Blvd #92581
West Hollywood,
90069 California
USA

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Websites that are accessed by the user’s system via our website
  • Date and time of the server request
  • IP address

This data is not merged with other data sources. This data is collected on the basis of Art. 6 para. 1 lit. f DSVGO. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – the server log files must be recorded for this purpose.

The website server is geographically located in Germany. As a result, no data is transferred to the USA and an appropriate level of data protection is guaranteed for data processing.

Further information on the processing of data by Kinsta Inc. can be found here: https://kinsta.com/legal/privacy-policy/

Cookies and other tracking technologies

What are cookies?

Cookies are data that are stored on your computer by a website that you visit and enable your browser to be reassigned. Cookies are used to transmit information to the site that sets the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you make there. This prevents you from having to re-enter required form data each time you use the website, for example. The information stored in cookies can also be used to recognize preferences and target content according to areas of interest.

There are different types of cookies: Session cookies are data sets that are only temporarily stored in the working memory and are deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. With this type of cookie, the information can also be stored in text files on your computer. However, you can also delete these cookies at any time via your browser settings.

First-party cookies are set by the website you are currently visiting. Only this website may read information from these cookies. Third-party cookies are set by organizations that do not operate the website you are visiting.

The legal basis for possible processing of personal data using cookies and their storage duration may vary. If you have given us your consent, the legal basis is Art. 6 para. 1 lit. a) DSVGO. Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Art. 6 para. 1 lit. f) DSVGO. The stated purpose then corresponds to our legitimate interest.

We use cookies to ensure the proper operation of the website, to provide basic functionalities, to measure reach and – with your consent – to tailor our services to your preferred areas of interest. We use both transient cookies and persistent cookies for this purpose.

Manage cookies

You can delete cookies already stored on your device at any time. If you want to prevent the storage of cookies, you can do this via the settings in your Internet browser.

Alternatively, you can also install so-called ad blockers. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

Information on providers based in third countries

We attach great importance to processing your data within the EU/EEA. However, we may use service providers who process data outside the EU/EEA. In these cases, we ensure that an appropriate level of data protection comparable to the standards within the EU is established at the recipient before your personal data is transferred. This can be achieved, for example, by means of EU standard contracts or binding corporate rules or special agreements to which the company may be subject.

Hubspot

Scope of the processing of personal data

We use functions of the HubSpot CMS from HubSpot Inc, 2nd Floor, 25 First Street, Cambridge, MA 02141, USA (hereinafter referred to as HubSpot). This is an integrated software solution that we use to cover various aspects of our online marketing. These include, among others: Email marketing (newsletters as well as automated mailings, e.g. to provide downloads), social media publishing & reporting, reporting (in particular traffic sources, access etc.), contact management (in particular user segmentation & CRM), landing pages and contact forms. HubSpot places a cookie on your computer. This allows personal data to be stored and evaluated, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and operating system), data about the advertisements displayed (in particular which advertisements have been displayed and whether the user has clicked on them) and also data from advertising partners (in particular pseudonymized user IDs).

Other recipients of the data processed by HubSpot are:

  • Amazon Web Services Inc.
  • Google Inc.
  • Cloudflare Inc.
  • Twilio Inc.
  • Message Systems Inc.
  • SendGrid Inc.
  • Snowflake Inc.
  • HubSpot Inc.
  • HubSpot Ireland Ltd.
  • HubSpot Germany GmbH
  • HubSpot Australia Pty. Ltd.
  • HubSpot Asia Pte. Ltd.
  • HubSpot Japan KK
  • HubSpot Latin America S.A.S.
  • HubSpot Sweden

Further information on the processing of data by HubSpot can be found here: https://legal.hubspot.com/de/privacy-policy

Purpose of data processing

We use the HubSpot plug-in to optimize our website and marketing activities.

Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 lit. a DSVGO.

Duration of storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law (e.g. for tax and accounting purposes).

Right of revocation and removal

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can prevent the collection and processing of your personal data by HubSpot by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript(https://noscript.net/) or Ghostery(https://www.ghostery.com) in your browser.

Further information on objection and removal options vis-à-vis HubSpot can be found at: https://legal.hubspot.com/de/privacy-policy

Google Analytics

Scope of the processing of personal data

We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). Google Analytics analyzes, among other things, the origin of visitors, the time they spend on individual pages and the use of search engines, thus enabling better monitoring of the success of advertising campaigns. Google places a cookie on your computer. This allows personal data to be stored and evaluated, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and operating system), data about the advertisements displayed (in particular which advertisements have been displayed and whether the user has clicked on them) and also data from advertising partners (in particular pseudonymized user IDs).

We use Google Analytics (Universal Analytics) to evaluate your use of our online presence, to compile reports on your activities and to use other Google services associated with the use of our online presence and the Internet. We have requested the anonymization of IP addresses, whereby Google shortens your IP address as soon as technically possible. However, it cannot be ruled out that your data will be transmitted to the servers of Google LLC based in the USA. On behalf of the operator of this online presence, Google will use this information to evaluate your use of the online presence, to compile reports on the activities of the online presence and to provide other services related to the use of the online presence and internet usage to the operator of the online presence.

Further information on the processing of data by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

Purpose of data processing

We use Google Analytics (Universal Analytics) to analyze the use of our online presence and to display targeted advertising to people who have already shown an initial interest by visiting our website.

Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 lit. a DSVGO.

Duration of storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or until you exercise your right of withdrawal.

Possibility of revocation

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript(https://noscript.net/) or Ghostery(https://www.ghostery.com) in your browser.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the online presence (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de

Further information on objection and removal options vis-à-vis Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

Google Tag Manager

Scope of data processing

We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google). With Google Tag Manager, tags from Google and third-party services can be managed and embedded in a bundle on an online presence. Tags are small code elements on an online presence that are used, among other things, to measure visitor numbers and behaviour, to record the impact of online advertising and social channels, to use remarketing and targeting and to test and optimize online presences. When a user visits the online presence, the current tag configuration is sent to the user’s browser. It contains instructions on which tags should be triggered. Google Tag Manager triggers other tags, which in turn may collect data. Information on this can be found in the sections on the use of the corresponding services in this privacy policy. Google Tag Manager does not access this data.

Further information on Google Tag Manager can be found at: https://www.google.com/intl/de/tagmanager/faq.html and in Google’s privacy policy: https://policies.google.com/privacy?hl=de

Purpose of data processing

The purpose of processing personal data is to collect and clearly manage and efficiently integrate the services of third-party providers.

Legal basis for data processing

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 lit. a DSVGO.

Duration of storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law. Advertising data in server logs is anonymized by Google deleting parts of the IP address and cookie information after 9 and 18 months respectively.

Google Webfonts

Scope of the processing of personal data

We use Google Web Fonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and the representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). The web fonts are transferred to the browser’s cache when the page is called up in order to be able to use them for the visually improved display of various information. If the browser does not support Google web fonts or prevents access, the text is displayed in a standard font. No cookies are stored on the visitor’s computer when the page is accessed. Data that is transmitted in connection with the page view is sent to resource-specific domains such as https://fonts.googleapis.com or https://fonts.gstatic.com. This allows personal data to be stored and analyzed, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on) and device and browser information (in particular the IP address and operating system).

The data will not be associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail. Further information on the processing of data by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

Purpose of data processing

The use of Google Web Fonts serves the purpose of an appealing presentation of our texts. If your browser does not support this function, a standard font will be used by your computer for display.

Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 lit. a DSVGO.

Duration of storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law (e.g. for tax and accounting purposes).

Possibility of objection and removal

Sie haben das Recht, Ihre datenschutzrechtliche Einwilligungserklärung jederzeit zu widerrufen. Durch den Widerruf der Einwilligung wird die Rechtmäßigkeit der aufgrund der Einwilligung bis zum Widerruf erfolgten Verarbeitung nicht berührt. Sie können die Erfassung sowie die Verarbeitung Ihrer personenbezogenen Daten durch Google verhindern, indem Sie die Speicherung von Cookies von Drittanbietern auf Ihrem Computer unterbinden, die “Do Not Track”-Funktion eines unterstützenden Browsers nutzen, die Ausführung von Script-Code in Ihrem Browser deaktivieren oder einen Script-Blocker wie z.B. NoScript (https://noscript.net/) oder Ghostery (https://www.ghostery.com) in Ihrem Browser installieren.

You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de

Further information on objection and removal options vis-à-vis Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de.

WPML

Scope of the processing of personal data

We use WPML from OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong (hereinafter referred to as: WPML). WPML is a multilingual plugin for WordPress. We use WPML to display our website in different languages. When you visit our website, WPML stores a cookie on your device to save the language setting you have selected. This allows personal data to be stored and analyzed, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and operating system). Further information on the collection and storage of data by WPML can be found here: https://wpml.org/documentation/privacy-policy-and-gdpr-compliance

Purpose of data processing of personal data

The use of WPML enables us to display our website in multiple languages.

Legal basis for the processing of personal data

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f DSVGO. Our legitimate interest lies in addressing visitors to our website in their native language.

Duration of storage

WPML stores cookies on your end device. Information on the storage duration of cookies can be found at: https://wpml.org/documentation/privacy-policy-and-gdpr-compliance

Possibility of objection and removal

You can prevent the collection and processing of your personal data by WPML by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript(www.noscript.net) or Ghostery(www.ghostery.com) in your browser.
Further information on objection and removal options vis-à-vis WPML can be found at: https://wpml.org/documentation/privacy-policy-and-gdpr-compliance.

Font Awesome

Scope of the processing of personal data

We use Font Awesome from the US company Fonticons (307 S. Main St., Suite 202, Bentonville, AR 72712, USA) on our website. When you visit our website, icons from Font Awesome are loaded via the Font Awesome Content Delivery Network (CDN) for an appealing display. When you visit our website, Font Awesome stores a cookie on your device to save the language setting you have selected. This allows personal data to be stored and analyzed, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and operating system). Further information on the collection and storage of data by Fonticons can be found here: https://fontawesome.com/privacy

Purpose of data processing of personal data

Font Awesome is a collection of scalable icons and symbols that can be easily used in web projects to make the user interface more visually appealing.

Legal basis for the processing of personal data

The legal basis for the data processing described is your consent, Art. 6 para. 1 sentence 1 lit. a DSVGO, which we request from you when you access the website. The data processing described will not be carried out without your consent. Once you have given your consent, you can withdraw it at any time with effect for the future.

Duration of storage

Fonticons stores cookies on your end device. Information on the storage duration of cookies can be found at: https://fontawesome.com/privacy

Possibility of objection and removal

You can prevent the collection and processing of your personal data by Fonticons by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript(www.noscript.net) or Ghostery(www.ghostery.com) in your browser.

You can find more information on data processing by Forticons in the privacy policy at https://fontawesome.com/privacy and the help page at https://fontawesome.com/help.

Wordfence Security

Scope of the processing of personal data

We use Font Awesome from the US company Defiant Inc (1120 N. 1st St., Suite 200, San Jose, CA 95112, USA) on our website. When you visit our website, Wordfence Security stores a cookie on your device to save the language setting you have selected. This allows personal data to be stored and evaluated, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and operating system).
Further information on the collection and storage of data by Defiant/Wordfence can be found here: https://www.wordfence.com/privacy-policy/

Purpose of data processing of personal data

Wordfence Security is used to increase the security of our website. The plugin analyzes traffic in real time, detects and blocks potential threats, protects against malware and improves overall security.

Legal basis for the processing of personal data

The legal basis for the described data processing is the legitimate interest, Art. 6 para. 1 sentence 1 lit. f DSVGO. This legitimate interest arises from our efforts to ensure the security of our website. Wordfence protects our website from external attacks and malware. The tool therefore increases both our website and your security when visiting and using our website.

Duration of storage

Defiant Inc. stores cookies on your end device. Information on the storage duration of cookies can be found at: https://www.wordfence.com/privacy-policy/

Possibility of objection and removal

You can prevent the collection and processing of your personal data by Defiant Inc. by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript(www.noscript.net) or Ghostery(www.ghostery.com) in your browser.

You can find more information on data processing by Defiant Inc. in the privacy policy at https://www.wordfence.com/privacy-policy/.

Company appearances

Our website provides information about art and art events related to the HR Group. Works of art can be purchased via the website. We also use the possibility of company appearances on social and professional networks for communication and the exchange of information with (potential) customers.

The publications on the company websites may contain information on services, advertising and information on customer contact.

We maintain a company presence on the following social/professional networks:

  • LinkedIn: Ireland Unlimited Company – Dublin, Ireland
  • Facebook and Instagram: Meta Platforms Ireland Limited – Dublin, Ireland

If you carry out an action on one of our company websites (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public. However, as we generally or to a large extent have no influence on the processing of your personal data by the companies jointly responsible for the corporate presence, we cannot provide any binding information on the purpose and scope of the processing of your data. Further information on objection and removal options vis-à-vis the providers of the social/professional networks can be found here: