Privacy Policy

Data protection and the privacy of visitors to our website is very important to us. We are therefore committed to protecting your personal data and only collect, process and use data in compliance with the General Data Protection Regulation (GDPR) and national data protection regulations. This privacy policy explains which of your personal data our website collects and how this data is used.

Our privacy policy is regularly updated in accordance with legal and technical requirements. Therefore please note the respective current version of our privacy policy.

The following privacy rules only apply to the PriceHubble AG websites at: https://pricehubble.com, https://dash.pricehubble.com, https://docs.pricehubble.com and https://fisher.pricehubble.com.

I. Controller name and address

The controller within the context of the General Data Protection Regulation and other national data protection laws as well as other data protection regulations is:

Price Hubble AG

Erlematte 9

8852 Wollerau

Switzerland

Email: contact@pricehubble.com

Website: www.pricehubble.com

All personal data for which Price Hubble AG is the controller as defined in the GDPR and processed by said company will also be transmitted to the PriceHubble Germany GmbH affiliates PriceHubble France SASU, PriceHubble Japan KK and processed by said in compliance with Article 6 (1) (f) GDPR. Japan and Switzerland are subject to the adequacy decision of the commission.

II. Name address of the data protection officer

The data protection officer for the controller is:

Niklas Hanitsch

secjur GmbH

Franz-Mayer-Str. 1

93053 Regensburg

Germany

Phone: +49 941 569 550 20

Email: dsb@secjur.com

Website: www.secjur.com

III. General information on data processing

  1. Scope of the processing of personal data

Your personal data will only be processed where required to provide a functional website as well as our contents and services. Data is only processed with your consent unless de facto grounds prevent first obtaining your consent and the data must be processed for legal reasons.

  1. Legal basis for processing personal data

The legal bases for processing personal data are the following facts standardized according to

Article 6 (1) GDPR:

  1. Article 6 (1) (a) GDPR, provided we obtain the contents of the data subject for processing personal data.
  2. Article 6 (1) (b) GDPR, where processing personal data is necessary for the performance of a contact with the data subject. This also applies to processing necessary for pre-contractual measures.
  3. Article 6 (1) (c) GDPR, where processing personal data is necessary to fulfill a legal obligation our company is subject to.
  4. Article 6 (1) (f) GDPR, where processing is necessary for the legitimate interests of one of our companies or a third party and overrides the interests, basic rights and fundamental freedoms of the data subject.
  5. Data erasure and storage period

Your personal data will be erased or blocked once the purpose for storage no longer exists. Where European or national legislature requires further storage under EU regulations, directives, laws or other regulations the controller is subject to, data may be stored until the end of the retention period specified under the standards. The data is subsequently also blocked or erased unless there is a necessity to store the data longer to conclude or to fulfill a contract.

IV. Displaying the website and generating log files

Every time our website is visited, our system automatically generates data and information about the computer system of the accessing computer. The following data will be collected in this context:

a) The user’s IP address

b) Data and time accessed

c) Your internet provider

d) Information about the accessing browser type and the version used

e) Your operating system

f) Websites directing your system to our website

g) Websites your system accessed through our website

h) Amount of data transferred

This data is also stored in log files on our system. In this case, this data is not stored together with your other personal data.

Article 6 (1) (f) GDPR sets out the necessary legal basis for our legitimate legal interest for the temporary storage of data and log files.

The system must temporarily store your IP address to display the website on your computer. This requires storing your IP address for the duration of your session. This data is stored in log files to ensure the functionality of the website and security of our IT systems and to optimize the website. In this regard, the data is not analyzed for marketing purposes.

The data is erased once data collection is no longer necessary to achieve the purpose. In the case of data collected to display the website, this is the end of the session.

If data is stored in log files, these are erased after seven days at the latest. It may be stored longer. In this case the user IP addresses are erased or altered so it can no longer be matched with the accessing client.

V. Cookies

Our website uses cookies. These are small files automatically generated by your browser which are saved on your IT system (laptop, tablet, smartphone, etc) when visiting our website.

The cookie contains information related to the specific device used. However, this does not mean we will be able to directly identify you.

The legal basis for processing personal data using cookies necessary for technical reasons is Article 6 (1) (f) GDPR. This is done to make our website more user-friendly. Some functions of our website cannot be offered without the use of cookies, since these are required to recognize the browser after changing pages. The user data collected by cookies necessary for technical reasons is not used to create user profiles.

The legal basis for processing personal data for analysis reasons using cookies not necessary for technical reasons is your consent according to Article 6 (1) (a) GDPR. Analysis cookies are used to optimize the quality of our website and its contents. Analysis cookies allow us to constantly improve our offerings and learn how our website is being used.

Cookies are saved to your computer. They are transmitted to our website from it. So you, the user, are therefore in full control of the use of cookies. You can change the settings of your internet browser to block or restrict cookies. You can also delete stored cookies at any time. This can also be done automatically. Disabling cookies for our website may restrict your ability to use functions on our website.

You can change the Flash Player settings to block Flash cookies, but these will not be blocked via your browser settings.

VI. Contact form and email contact

Our website has a contact form to contact us electronically. Simply enter your information in the input screen to use the form. This data will then be transmitted to us and stored. The following data will be collected:

  1. First name
  2. Last name
  3. Company name
  4. Email address
  5. Telephone number
  6. Department
  7. Country
  8. Message

When sending the message, the following data will also be saved:

a) Your IP address

b) Registration date and time

When submitting your inquiry we obtain your consent to process this data, referencing this privacy policy.

You can also contact us using the email address provided. In this case, the personal data transmitted through your email will be stored.

The data is solely used to process the communication.

The relevant user’s consent serves as the legal basis for data processing according to Article 6 (1) (a) GDPR.

When personal data is transmitted by email, Article 6 (1) (f) GDPR serves as the necessary legal basis for data processing. When contacting us with the intent to conclude a contract, Article 6 (1) (b) GDPR further provides the legal basis for processing.

The legal basis for saving the IP address and the data and time you registered is Article 6 (1) (f) GDPR, our legitimate interest to protect our contact form from misuse and to protect our IT systems.

The personal data collected via the input screen is solely processed to process your inquiry.

The data is erased once data collection is no longer necessary to achieve the purpose. For personal data from the input screen of the contact form and data transmitted by email this is when the respective communication with you has ended. This is the case when circumstances lead us to believe the respective matter has been resolved.

Any other personal data transmitted when submitting your inquiry is erased after seven days at the latest.

VII. Inquiry form

Our website has an inquiry form to contact us electronically about our products. Simply enter your information in the input screen to use the form. This data will then be transmitted to us and stored. The following data will be collected:

  1. First name
  2. Last name
  3. Company name
  4. Email address
  5. Telephone number
  6. Industry
  7. Country
  8. Message

When sending the message, the following data will also be saved:

a) Your IP address

b) Registration date and time

You can also contact us using the email address provided. In this case, the personal data transmitted through your email will be stored.

The data is only used to process your inquiry.

The necessary legal basis is Article 6 (1) (b) GDPR, the pre-contractual relationship or, where applicable, Article 6 (1) (f) GDPR, our legitimate interest to discuss our products with you based on your inquiry.

The legal basis for saving the IP address and the data and time you registered is Article 6 (1) (f) GDPR, our legitimate interest to protect our contact form from misuse and to protect our IT systems.

The data is erased once data collection is no longer necessary to achieve the purpose. For personal data from the input screen of the inquiry form and those transmitted by e-mail, this is when the respective communication with you has ended. This is the case when circumstances lead us to believe the respective matter has been resolved. Data will be stored longer if a contract has been concluded.

Any other personal data transmitted when submitting your inquiry is erased after seven days at the latest.

VIII. Newsletter

Our website allows you to subscribe to our company newsletter. The regular newsletter keeps you up to date about news. When subscribing the newsletter, we collect the following data:

a) Email address

b) First name

c) Last name

d) Language (German / English / French)

The legal basis for data processing for the purpose of newsletter distribution and analysis is Article 6 (1) (a) GDPR, your consent.

For legal reasons, we will send a confirmation email with double-click opt-in to the email address specified when subscribing our newsletter. This confirmation email verifies you, the owner of the email address, authorized receiving this newsletter. When subscribing our newsletter we also store:

a) the IP address assigned by our Internet Service Provider (ISP)

b) the IT system you used at the time you subscribed to the newsletter

c) data and time subscribed

This data is necessary to later be able to trace (potential) misuse of your email address. It is collected based on our legitimate interest according to Article 6 (1) (f) GDPR.

You may unsubscribe our newsletter at any time. You may withdraw your consent to your personal data being stored, granted when subscribing our newsletter, at any time. Every newsletter includes a link to withdraw your consent. You can also notify us by email you no longer wish to receive our newsletter.

Our email newsletter is distributed by the technical service provide The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (https://www.mailchimp.com/), to whom we also transmit the data you provided when subscribing our newsletter. This data transmission is considered order processing through MailChimp. Please note, your data is typically transmitted to a MailChimp server in the USA, where it is then stored.

MailChimp uses this information on our behalf to send the newsletter and for statistical analysis. For analysis purposes the emails sent contains so-called web beacons or tracking pixels, a one pixel image file, stored on our website. These are used to determine whether a newsletter email was opened and which links, if any, were clicked. They also collect technical information (e.g. time accessed, IP address, browser type and operating system). The data is exclusively collected pseudonymized and are not matched with your other personal data to prevent them from being directly linked to an individual. This data is only used for statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the subscribers’ interest.

If you wish to object to data analysis for statistical purposes, you will need to unsubscribe our newsletter.

According to Article 6 (1) (f) GDPR, MailChimp may use this data themselves based on the legitimate interest in a user-friendly design and to optimize the service as well as for market research purposes, for instance to determine in which countries subscribers are located. However, MailChimp does not use the data of our newsletter subscribers to contact subscribers directly or transmit it to third parties.

To ensure your data is protected in the USA, we concluded a data processing agreement with MailChimp based on standard contact clauses of the European Commission to allow transmitting your personal data to MailChimp. If interested, you may review this data processing contract at the following internet address: https://mailchimp.com/legal/forms/data-processing-agreement/.

You can read the MailChimp privacy policy at: https://mailchimp.com/legal/privacy/

IX. Disclosing your data to third parties

We use some services of external service providers to make our website as easy and convenient as possible for you to use. Below you can learn how to obtain information about the privacy policies and how the services and functions are used to also exercise your rights with these service providers.

  1. Google Analytics
  2. MouseFlow
  3. Google Maps
  4. Mapbox
  5. Google Fonts
  6. Hotjar
  7. Google Tag Manager

1. Google Analytics

Our websites use Google Analytics, a web analysis service of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. In this context we use pseudonymized usage profiles and cookies (see “Cookies”). The information on your use of this website generated by the cookie, such as

  1. Browser type/version,
  2. operating system used,
  3. Referrer URL (previous website visited),
  4. Host name of the accessing computer (IP address),
  5. Time of the server request,

is transmitted to a Google server in the USA and stored there. The information is used to analyze the use of the website, generate reports about website activity and to provide additional services related to website and internet use for market research purposes and to design the website to meet the needs of users. This information may also be transmitted to third parties where required by law or if third parties are processing this data on our behalf. Your IP address will never be merged with other Google data. The IP addresses are anonymized so they cannot be linked (IP masking).

You can configure your browser software to block cookies. However, in this case please note that you may not be able to fully use all functions of this website.

These processing operations are solely carried out with your express consent according to Article 6 (1) (a) GDPR, granted through the opt-in in our cookie banner.

You can also prevent data related to your use of this website generated by the cookie (including your IP address) being collected and this data being processed by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout).

Apart from the browser add-on, especially for browsers on mobile devices, you can also prevent collection through Google Analytics by clicking the following link: Disable Google Analytics. This adds an opt-out cookie which prevents future data collection when visiting this website. The opt-out cookie only applies to this browser and only to our website and is stored on your device. After deleting cookies in this browser, you will need to reinstall the opt-out cookie.

For more information about data protection related to Google Analytics, please visit: https://support.google.com/analytics/answer/6004245

2. MouseFlow

Our websites use Mouseflow. Mouseflow is an analysis tool of Mouseflow ApS, Flaesketorvet 68, 1711 Kopenhagen, Denmark. Mouseflow allows logging carefully selected visits (with IP address pseudonymized).

This generates a log of cursor movement and clicks for the purpose of playing back random visits to the website and derive website improvements. Any personal data also collected in the process is solely according to Article 6 (1) (a) GDPR based on your consent to statistical analysis of user behavior for optimization purposes.

You may permanently object to web analysis through Mouseflow at any time by downloading and installing the opt-out cookie from this link: www.mouseflow.de/opt-out/ (the opt-out cookie added by Quantcast.)

For additional information and the Mouseflow privacy policy, please visit: http://mouseflow.com/privacy/

3. Google Maps

Our websites use Google Maps to show maps and calculate routes. Google Maps is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis for using Google Maps is your consent according to Article 6 (1) (a) GDPR.

For the Google Maps Terms of Service, please visit Google Maps Platform Terms of Service. For detailed information, please visit the google.com Safety Center: Data Transparency and the Privacy Policy.

4. Mapbox

Our websites use Mapbox. This is a service and hosting provider of OpenStreetMap based maps. We use these maps to display city maps and sections of maps. Mapbox is used based on your consent according to Article 6 (1) (a) GDPR.

Mapbox is operated by Mapbox, Inc., 1714 14th Street NW, Washington, DC 20009-4309, USA.

When visiting a page on this website, the respective Mapbox component is automatically downloaded from Mapbox. This provides Mapbox with information about which specific subpage you visited. The purpose of embedding Mapbox components is to show users geographical data on this website based on maps.

If you are also logged into Mapbox, Mapbox will recognize you throughout the respective visit to our website, including subpage.

For the relevant Mapbox Privacy Policy, please visit: https://www.mapbox.com/privacy/#start

5. Google Fonts

To ensure a uniform display of fonts, our website uses so-called Web Fonts, a service of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. When visiting this website, your browser downloads the necessary Web Fonts to your browser cache to correctly display text and fonts.

Your browser needs to connect to Google servers for this purpose. This notifies Google your IP address accessed our website. We use Google Web Fonts in the interest of a uniform, attractive website display.

These processing operations are solely carried out with your express consent according to Article 6 (1) (a) GDPR.

For more information about Google Web Fonts, please visit https://developers.google.com/fonts/faq and the Google Privacy Policy: https://www.google.com/policies/privacy/

6. Hotjar

Our website uses the web analysis service Hotjar, a service of Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe.

This tool enables tracking movement on web pages where Hotjar is used (so-called heatmaps). This shows, for example, how far the various users scroll and which buttons are clicked and how often. This tool further enables obtaining direct feedback from website users. In addition, the functionality of the Hotjar-based website can be improved through Hotjar services by making them more user-friendly, valuable and easy for the user to navigate.

When using this tool, we ensure your personal data is protected. This only allows us to track which buttons were clicked, cursor movement, how far the page was scrolled, the screen size of the device, device type and browser information, geographic location (only the country) and preferred language to display our website. Parts of the website showing your personal data or that of third parties are automatically hidden by Hotjar and can therefore never be traced. To prevent any direct link to an individual, the IP addresses are only saved and processed anonymous. However, Hotjar uses a variety of third party services such as Google Analytics and Optimizely. It is therefore possible for these services to collect data transmitted by your browser within the context of web page requests. These would be cookies or your IP address, for instance. Your data is therefore processed according to Article 6 (1) (a) GDPR based on your consent for the purpose of statistical analysis of user behavior for optimization and marketing purposes.

Hotjar allows every use to block the Hotjar tool using a “Do Not Track header” to prevent data about the visit to the respective website from being collected. This is a setting supported by the current versions of all standard browsers. Your browser sends a request to Hotjar for this purpose, prompting to disable tracking the respective user. If you use different browsers/computers to visit our website, you will need to set up the “Do Not Track header” for every browser/computer.

You can at any time prevent your data from being collected by Hotjar when visiting a Hotjar-based website by visiting our opt-out page https://www.hotjar.com/legal/compliance/opt-out/ and clicking disable Hotjar.

For more information, please visit: https://www.hotjar.com

For the Hotjar Ltd. privacy policy, please visit: https://www.hotjar.com/privacy/

7. Google Tag Manager

This website uses Google Tag Manager, a cookieless domain which does not collect personal data.

This tool allows implementing “Website Tags" (i.e. keywords embedded in HTML elements) and managed through an interface.

The tool further triggers other tags which in turn may potentially collect data. Google Tag Manager does not access this data. If disabled at domain or cookie level, this remains effective for all tracking tags implemented by Google Tag Manager.

X. Generating leads

1. Xing

We generate leads through Xing, a service offered by New Work SE, Dammtorstraße 30, 20354 Hamburg. This processes the following personal data: Name, email address, phone number, profession, employer. This data is processed based on your consent according to Article 6 (1) (a) GDPR in conjunction with Article 7 GDPR which you granted through Xing. Your data is not transmitted to third countries (outside the EU or EEA) without an appropriate data protection level. We will contact you within a few days after granting your consent and if necessary add data to our CRM system. If a contract is concluded, we will process your data according to Article 6 (1) (b) GDPR. Otherwise your data will be erased 3 months from the last contact.

2. LinkedIn

We generate leads through LinkedIn, a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. This processes the following personal data: First and last name, job title, company name, phone number (only France), email address. This data is processed based on your consent according to Article 6 (1) (a) GDPR in conjunction with Article 7 GDPR which you granted through LinkedIn. Your data is not transmitted to third countries (outside the EU or EEA) without an appropriate data protection level. We will contact you within a few days after granting your consent and if necessary add data to our CRM system. If a contract is concluded, we will process your data according to Article 6 (1) (b) GDPR. Otherwise your data will be erased 3 months from the last contact.

XI. Our social media activity

We have social media pages to allow us to also communicate with you through social media and provide you with information about our services. When visiting one of our social media pages, according to Article 26 GDPR we are the joint controller together with the respective service provider of the social media service with respect to the processing of personal data this triggers.

In this case, we are not the original service provider of this page, but merely using it as an option offered to us by the respective provider.

We would therefore like to point out that your data could potentially also be processed outside the European Union or the European Economic Area. Any use can therefore put your data at risk, as exercising your rights, e.g. to obtain information, erasure, objection, etc., can be more difficult and the service providers often process data from these networks directly for advertising purposes or to analyze user behavior beyond our control. When service provider creates user profiles, they often use cookies, or the user behavior is directly matched with a specific user account on social media (if logged in).

The described processing of personal data is carried out according to Article 6 (1) (f) GDPR based on our legitimate interest and the legitimate interest of the respective service provider to communicate with you in a timely manner or provide information about our services. If the respective service providers require users to consent to data processing, the legal basis relates to Article 6 (1) (a) GDPR in conjunction with Article 7 GDPR.

Since we are unable to access the databases of the service providers, you should exercise your rights (e.g. to obtain information, correction, erasure, etc.) directly with the respective service provider. For additional information about how your data is processed on social media networks and how to object or withdraw your consent (opt-out), we have compiled a list of the respective social media service providers we use below:

1. Twitter

Joint responsibility: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland

Privacy policy: https://twitter.com/en/privacy

Information about your data: https://twitter.com/settings/your_twitter_data

Opt-out and advertising settings: https://twitter.com/settings/account/personalization

2. LinkedIn

Joint responsibility: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

Privacy policy: https://www.linkedin.com/legal/privacy-policy

Opt-out and advertising settings: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

3. XING

Joint responsibility for data processing in Germany:

XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany

Privacy policy: https://privacy.xing.com/en/privacy-policy

Data disclosure report for XING members: https://www.xing.com/settings/privacy/data/disclosure

4. YouTube

Joint responsibility for data processing in Europe: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Privacy policy: https://policies.google.com/privacy

Opt-out and advertising settings: https://adssettings.google.com/authenticated

XII. Links to social media networks

We use links to refer to our social media accounts. However, these are not social media plugins. Simply visiting our website will therefore not notify the respective social media platform of your visit. When clicking on the link for the respective social media platform, your data will be processed by the social media platform.

We specifically use links to the LinkedIn and Twitter pages. When clicking the respective links, you will be redirected to the respective social media website. This notifies the social media service provider you visited our website. For more information about how your data is processed by social media platforms, see XI.

XIII. Application

1. General information

Our website allows you to apply for jobs and send us your application by email or mail. When submitting your application, we will process the information you provided in the application. When submitting your application electronically, we process your email address and the information from your application. This is necessary to process the application and respond to the applicant.

When sending your application by mail, we process the data you have provided. The personal data from the application is processed to determine a suitable applicant.

The legal basis for processing your personal data is Article 6 (1) (f)) GDPR. Our legitimate interest is to allow you to contact us at any time so we may answer your inquiry. The legal basis for processing personal data from the application is Article 6 (1) (b)), Article 88 Abs. 1 GDPR in conjunction with § 26 (1) Federal Data Protection Act (new).

We generally store the application email and the documents submitted for six months. It is then deleted in compliance with privacy laws unless you have granted us your consent to add the applications to our applicant pool.

2. Workable

We use the online recruiting software service Workable (Workable Software Limited, 1a Kingly Street, Second Floor, London, W1B 5QA, UK) for online applications.

Workable processes your personal data you provided for hiring purposes. The form collects the following data relating to you: First and last name, email address, heading (optional), qualifications, resume, cover letter. In addition, the time taken to prepare the application is also collected.

For the Workable privacy policy, please visit: https://www.workable.com/privacy.


3. Google reCAPTCHA

This website also uses the reCAPTCHA function of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. This function is primarily used to determine whether the information was entered by an actual person or based on misuse through machine or automated processing. The service also includes transmitting the IP address and possibly additional data required by the Google service reCAPTCHA to Google.

These processing operations are solely carried out with your express consent according to Article 6 (1) (a) GDPR.

For more information about Google reCAPTCHA and the Google privacy policy, please visit: https://www.google.com/policies/privacy/

4. Amazon Cloudfront

This website uses the content delivery network (CDN) Cloudfront. This is a service of Amazon Web Services Inc., 410 Terry Avenue North, Seattle, WA 98109-5210.

The Cloudfront CDN provides duplicates of website data to various globally-distributed Amazon Web Services (AWS) servers. This allows the website to load faster, improves system stability and increases protection against data loss.

Some of the representations embedded in this website are fetched from the Cloudfront CDN when visiting the page. This query transmits data about your use of our website from Amazon servers to EU countries, where it is then stored. This takes place as soon as you visit our website.

Amazon Web Services and the Amazon CDN Cloudfront are used in the interest of improving website stability, improving protection against data loss, and to improve the load speeds of this website. This constitutes our legitimate interest as defined by Article 6 (1) (f) GDPR.

For more information, please visit: https://aws.amazon.com/data-protection/ and

https://aws.amazon.com/privacy/

IX. Our products

1. Dash

Our product Dash allows our customers to manage and organize their dossiers and obtain a property assessment. In this context, primarily property data is processed.

However, in connection with registering for and using Dash, your following personal data will also be processed by Dash:

  • IP address
  • User name
  • Organization
  • Browser version
  • User rights (re. module accessed)
  • Dossier address

This data is processed and stored for the purpose of preventing misuse of / errors in our service and to ensure proper display. In this respect, storing this data is necessary to protect ourselves and is based on our legitimate interest according to Article 6 (1) (f) GDPR.

We further use Google Analytics within Dash to improve our products and make it easier and more user-friendly to use. This provides us with statistics about the user behavior of our customers in Dash so we can then make modifications and improvements. The legal basis for statistical analysis is Article 6 (1) (a)) GDPR, your consent. For more information about Google Analytics, please see IX. 1 of our privacy policy.

2. Fisher

Our customers can embed our product Fisher, a property assessment tool, as widget or API on their websites. In this context, we primarily serve as the data processor for our customers.

In this context, the specified real estate data and the following contact information (personal data) of the widget users are processed by the website operator for the property assessment and contact purposes:

  • Salutation
  • Name (first and last name)
  • Email address
  • Phone number (optional)
  • Reason for assessment (optional)

The user will then receive an assessment for their specific property. We provide the website operator with the following information from the widget / API. The legal basis for processing is your consent according to Article 6 (1) (a)) GDPR.

Your contact information is temporarily stored for 3 weeks. Your information is only saved after clicking the submit button: „Obtain assessment“. We do not process information provided before this.

In addition to the information you enter in the widget / API, we also collect:

  • IP address
  • User name
  • Organization
  • Browser version
  • User rights (re. module accessed)
  • Dossier address
  • User email address

This data is processed on the basis of Article 6 (1) (f)) GDPR to prevent misuse, for technical implementation and to detect errors.

We would further like to point out this widget / API uses Google Analytics. This provides us and the website operator with user behavior statistics so appropriate modifications can be made. The statistical analysis is visible to both us and the website operator. The legal basis for processing for analysis purposes is Article 6 (1) (a)) GDPR, your consent. For more information about Google Analytics, please see IX. 1 of our privacy policy.

X. Content Delivery Network (CDN)

Our website uses a so-called Content Delivery Network (CDN). This is a network of powerful servers which temporarily store contents in various locations around the world. The CDNs are used to provide contents quickly, taking the load off the web host by distributing data traffic.

The CDN transmits static contents displayed the same to all visitors to the website, such as video contents from streaming services or code framework. Dynamic contents are initially customized to the user and only generated at the time of the query. This includes customized contents from web applications, email or online shops. To use the latter, information about the website visitor first needs to be transmitted to the CDN.

The legal basis for using a CDN and transmitting your data to said is our legitimate interest according to Article 6 (1) (f) GDPR. The legitimate interest is based on our need to display our website fast and without technical issues, and to take load off our IT infrastructure.

1. Google CDN

We use a Google CDN by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

For more information, please visit: https://cloud.google.com/cdn

For the privacy policy, please visit: https://policies.google.com/privacy

2. Hotjar CDN

We use a Hotjar CDN by Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe.

For more information, please visit: https://www.hotjar.com

For the Hotjar Ltd. privacy policy, please visit: https://www.hotjar.com/privacy/

3. Cloudflare

Our website uses CloudFlare services by CloudFlare Inc., 101 Townsend St, San Francisco, CA 94107, USA.

For more information about the data collected, please visit:

https://blog.cloudflare.com/what-cloudflare-logs/ and https://www.cloudflare.com/privacypolicy/.

For the Cloudflare privacy policy, please visit: https://www.cloudflare.com/privacypolicy/

XI. Rights of the data subject

When your personal data is processed, you are the data subject as defined by the GDPR. You therefore have the following rights with the controller:

1. Right to confirmation

You have the right to obtain confirmation from us whether personal data pertaining to you is processed.

2. Right of access Article 15 GDPR

By law, you have the right to at any time obtain information from us free of charge about the information stored pertaining to you and to obtain a copy of this data.

3. Right to correction Article 16 GDPR

You have the right to request the correction of incorrect personal data pertaining to you. You further have the right, taking into account the purpose of processing, to request the completion of incomplete personal data.

4. Erasure Article 17 GDPR

You have the right to request us to immediately erase personal data pertaining to you if one of the legal reasons applies and provided processing or storage is not necessary.

5. Restriction of processing Article 18 GDPR

You have the right to request us to restrict processing if one of the legal requirements is met.

6. Data portability Article 20 GDPR

You have the right to obtain the personal data pertaining to you which you have provided in a structured, common and machine readable format. You further have the right to make this data transmit this data to another controller without hindrance from us, whom the data was provided, if processing is based on consent according to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract according to Article 6 (1) (b) GDPR and processing was conducted using automated processes, provided processing is not required to perform a task in the public interest or to exercise public authority transferred to us.

When exercising you right to data portability according to Article 20 (1) GDPR, you further have the right to have the personal data transmitted directly from one controller to another controller where technically feasible and this does not affect the rights and freedoms of other persons.

7. Objection Article 21 GDPR

You have the right to object to processing of your personal data based on Article 6 (1) (e) (data processing in the public interest) or f (data processing based on overriding interest) GDPR at any time for reasons related to your particular situation.

This also applies to profiling based on these provisions as defined by Article 4 (4) GDPR.

After objecting, we will no longer process your personal data unless we are able to demonstrate compelling and legitimate reasons for processing which override your interest, rights and freedoms, or if processing serves to assert, exercise or defend legal claims.

In some cases, we process data for direct advertising purposes. You may at any time object to personal data being processed for this type of advertising. This also applies to profiling within the context of such direct advertising. After objecting to us processing data for the purpose of direct advertising, we will no longer process the personal data for this purpose.

You further have the right to object to us processing personal data pertaining to you for scientific or historical research purposes or for statistical purposes according to Article 89 (1) GDPR for reasons pertaining to your particular situation unless this processing is necessary to perform a task in the public interest.

Notwithstanding Directive 2002/58/EC, within the context of using information society service you have the option to exercise your right to object via automated procedures that use technical specifications.

8. Withdrawing privacy consent

You have the right to withdraw your consent to data processing at any time with future effect. Your data processed prior to such time remains legitimate. You can submit your withdrawal to: contact@pricehubble.com

9. Complaint with a regulatory authority

You have the right to submit a complaint about our processing of personal data with a supervisory authority for data protection.

XIII. Privacy policy timeliness and changes

This privacy policy is current as of: October 2020.

Improvements to our website and its offers or changes to the law, for example case-law or official directives may make it necessary to update this privacy policy. You can review and print out the current version of our privacy policy at any time on our website.

Thank you for your inquiry. We will contact you shortly.
Something went wrong. Please try again in a while.