Privacy Policy

Information on the processing of personal data by the Alpina Group of Companies Germany (Privacy Policy)

Via the following information, we would like to give you an overview of the processing of your personal data by the companies within the Alpina Group Germany mentioned below, as well as your rights in this regard:

Alpina Parking Deutschland GmbH
Mauerkircherstraße 181
81925 München
Phone: +49 89 59 49 61
E-Mail: office@alpina-parking.com

You can reach our data protection officer via the aforementioned postal address or by 
e-mail at: office@alpina-parking.com.

Alpina Parking Stachus GmbH
Mauerkircherstraße 181
81925 München
Phone: +49 89 59 49 61
E-Mail: office@alpina-parking.com

You can reach our data protection officer via the aforementioned postal address or by 
e-mail at: office@alpina-parking.com

Alpina Consulting GmbH
Billrothstraße 4/3
1190 Wien
Phone: +49 89 59 49 61
E-Mail: office@alpina-parking.com

You can reach our data protection officer via the aforementioned postal address or by 
e-mail at: office@alpina-parking.com

Alpina Parking Properties GmbH
Mauerkircherstraße 181
81925 München
Phone: +49 89 59 49 61
E-Mail: office@alpina-parking.com

You can reach our data protection officer via the aforementioned postal address or by 
e-mail at: office@alpina-parking.com

A. General information, valid for all processing

We process your personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and all other applicable laws, such as the German Federal Data Protection Act (BDSG). Where necessary, we will obtain your consent beforehand.

1. TERMS USED

“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

“Processing” refers to any operation or set of operations which is performed upon personal data, whether or not by automatic means. The term is broad and encompasses virtually any handling of data.

“Controller” means the natural or legal person, public authority, agency, or other body which alone, or jointly with others, determines the purposes and means of the processing of personal data.

With regard to these and other terms used, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

2. COOPERATION WITH DATA PROCESSORS AND THIRD PARTIES

Within the entire group of companies, access to your data is granted to those offices that require it in order to fulfill our contractual services and legal obligations. As far as your data is transferred to within the group of companies or to external services (e.g., billing services, IT services, consulting, sales and marketing, data destruction, logistics, telecommunication), this is only done on the basis of a legal permission, e.g., if a transfer of data to third parties, such as to payment service providers, in accordance with Art. 6 para. 1 lit. b) GDPR, is necessary for the performance of the contract, you have consented in accordance with Art. 6 para. 1 lit. a) GDPR, a legal obligation in accordance with Art. 6 para. 1 lit. c) GDPR provides for this or on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR.

If we entrust third parties with the processing of data on the basis of a so-called “data protection agreement”, this is done on the basis of Art. 28 GDPR.

3. TRANSMISSION TO THIRD COUNTRIES

As a matter of principle, we do not transfer personal data to entities in third countries (outside the EU or EEA) or international organizations.

4. RIGHTS OF THE PERSON CONCERNED

You have the right to obtain confirmation as to whether or not data in question are being processed, to obtain information about such data, and to obtain further information and a copy of the data in accordance with Art. 15 GDPR.

You have according to Art. 16 GDPR the right to request the completion of the data concerning you or the correction of incorrect data concerning you.
They shall, in accordance with Art. 17 GDPR, the right to demand that the data in question be deleted without delay or, alternatively, in accordance with Art. 18 GDPR to demand a restriction of the processing of the data.

You have the right to request that the data concerning you, that you have provided to us, be processed in accordance with Art. 20 GDPR and to request its transfer to other data controllers.

You also have in accordance with Art. 77 GDPR the right to lodge a complaint with a competent supervisory authority, e.g., with

Berlin Commissioner for Data Protection and Freedom of Information

Friedrichstraße 219

10969 Berlin

5. RIGHT OF WITHDRAWAL

You have the right to withdraw consent granted in accordance with Art. 7 (3) GDPR at any time without giving reasons with future effect. You can do this by simply sending a message to the contact addresses above.

6. RIGHT TO OBJECT

You may object to the future processing of data concerning you in accordance with Art. 21 GDPR at any time. The objection can be made in particular against the processing for purposes of direct advertising.

7. DELETION OF DATA

The data processed by us in accordance with Art. 17 and 18 GDPR will be deleted or its processing restricted. Unless expressly stated within the scope of this data protection declaration, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data are not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e., the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.

In accordance with legal requirements in Germany, commercial letters and similar correspondence in particular must be retained for six years, and commercial books and similar records, accounting documents and documents relevant to taxation for ten years. Furthermore, the storage takes place as far as necessary for the preservation of evidence within the scope of the legal statute of limitations. According to Sections 195 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being three years.

B. Processing in detail

1. PROCESSING OF PERSONAL DATA ON ONLINE PRESENCES

Responsible for data processing depending on the website you visit:
Alpina Parking Deutschland GmbH
Alpina Parking Stachus GmbH
Alpina Consulting GmbH
Alpina Parking Properties GmbH

1.1. Hosting

The hosting services we use are for the provision of the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating this online offering.

In this context, we, or our hosting provider, store all inventory data, contact data, content data, contract data, usage data, meta data, and communication data of customers, interested parties and visitors of this online offer in connection with the website on the basis of our legitimate interests in an efficient and secure provision of this online offer in accordance with the German Data Protection Act. Art. 6 para. 1 lit. f GDPR in conjunction with. Art. 28 GDPR (conclusion of order processing agreement).

1.2. COLLECTION OF ACCESS DATA AND LOG FILES

We, or our hosting provider, collect data on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR, in particular in the secure and efficient provision of our website, and access data of the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.

Log file information is stored for security reasons (e.g., to clarify acts of abuse or fraud) for a maximum of seven days and then deleted. Data whose further retention is required for evidentiary purposes is exempt from deletion until the respective incident has been finally clarified.

1.3. COMMENTS AND CONTRIBUTIONS

When users leave comments or other contributions, in addition to their comment, information on the time of creation, their IP addresses, e-mail address and the username they have chosen are stored for seven days on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR. This is done for our security in case someone leaves illegal content in comments and posts (insults, forbidden political propaganda, etc.). In this case, we may be prosecuted ourselves for the comment or post and are therefore interested in the identity of the author.

1.4. COOKIES AND RIGHT TO OBJECT TO DIRECT ADVERTISING

“Cookies” are small files that are stored on users’ computers. Different information can be stored within the cookies. The primary purpose of a cookie is to store information about a user (or the device on which the cookie is stored) during or after his visit within an online offer. As temporary cookies, «Session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online offering and closes their browser. In such a cookie, for example, the contents of a shopping cart in an online store or a login status may be stored. “Permanent” or “persistent” cookies are those that remain stored even after the browser is closed. For example, the login status can be saved when users visit them after several days. Likewise, such a cookie may store the interests of users, which are used for reach measurement or marketing purposes. “Third-party cookies” are cookies that are offered by providers other than the responsible party operating the online offering (otherwise, if they are only the cookies of the responsible party, they are referred to as “first-party cookies”).

If users do not want cookies to be stored on their computer, they are asked if they wish to disable the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies may lead to functional restrictions of the online offering.

A general objection to the use of cookies used for online marketing purposes can be declared for a large number of the services, especially in the case of tracking, via the U.S. site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be prevented by disabling them in the browser settings. Please note that in this case not all functions of this online offer can be used.

2. VIDEO SURVEILLANCE

Responsible companies depending on the parking facility you visit:
Alpina Parking Deutschland GmbH
Alpina Parking Stachus GmbH
Alpina Consulting GmbH
Alpina Parking Properties GmbH

Due to our warranted interest in accordance with Art. 6 para. 1 lit. f GDPR as well as § 4 BDSG for the exercise of domiciliary rights, collection of evidence, prosecution of fraud and other offenses, our parking facilities have partial video surveillance. Video surveillance is also used to fulfill our contractual obligations to you (Art. 6 (1) lit. b GDPR), as it is necessary for contacting our central technical customer service and troubleshooting.

The recorded data is deleted again no later than 14 days after recording, unless there is a specific reason for the longer recording, i.e., particularly if the recordings are necessary for the clarification of specific criminal acts. In these cases, we collect further contact data from the Kraftfahrtbundesamt (Federal Motor Transport Authority) or the Zentralruf der Autoversicherer (Central Service Centre of Motor Vehicle Insurers) on the basis of our legitimate interest.

3. LICENSE PLATE RECOGNITION

Responsible companies depending on the parking facility you visit:
Alpina Parking Deutschland GmbH
Alpina Parking Stachus GmbH
Alpina Consulting GmbH
Alpina Parking Properties GmbH

We process the license plate numbers of vehicles on the basis of our warranted interest in accordance with Art 6 (1) lit. f GDPR and § 4 BDSG for the exercise of domiciliary rights, for the prevention of fraud and for the enforcement of our contractual and hiring conditions.

Automatically recorded data is deleted again immediately upon exiting the parking facility, unless there is a specific reason for longer storage, i.e., in particular if the records are required to clarify specific criminal acts or to enforce our contractual rights and obligations. In these cases, we collect further contact data from the Kraftfahrtbundesamt (Federal Motor Transport Authority) or the Zentralruf der Autoversicherer (Central Service Centre of Motor Vehicle Insurers) on the basis of our legitimate interest.

4. PROCESSING OF PERSONAL DATA FOR THE DELIVERY OF CONTRACTUAL SERVICES

The responsible companies depending on concluded contract:
Alpina Parking Deutschland GmbH
Alpina Parking Stachus GmbH
Alpina Consulting GmbH
Alpina Parking Properties GmbH

We process inventory data (e.g., names and addresses as well as contact data of users) and contract data (e.g., services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and services in accordance with Art. 6 para. 1 lit b. GDPR. We only collect data that is required for the conclusion or execution of the contract and use it exclusively for these purposes. We also collect data from third parties, e.g., the Kraftfahrtbundesamt (Federal Motor Transport Authority) or the Zentralruf der Autoversicherer (Central Service Centre of Motor Vehicle Insurers), that is required to assert contractual claims or in relation to the settlement of claims within the scope of a contractual relationship.

The deletion of the data takes place after the expiration of legal warranty periods, the necessity to keep the data is reviewed every three years; in the case of legal archiving obligations, the deletion takes place after their expiration, unless there is a concrete reason for the further storage. Information in any customer account will remain until it is deleted.

5. PROCESSING OF PERSONAL DATA FOR THE PURPOSES OF CONTACT SUPPORT

Responsible companies depending on your request:
Alpina Parking Deutschland GmbH
Alpina Parking Stachus GmbH
Alpina Consulting GmbH
Alpina Parking Properties GmbH

When contacting us (e.g., by contact form, e-mail, telephone or via social media), the user’s details will be used to process the contact request and its handling in accordance with Art. 6 para. 1 lit. b) GDPR or to safeguard our legitimate interests in accordance with Art. 6 para. 1 lit. b) GDPR in the performance of the requested communication. User information may be stored in a customer relationship management system (“CRM System”) or similar inquiry organization.

We delete the requests of, and related communications with, user if they are no longer necessary for processing the requests. We review this necessity every two years; furthermore, the legal archiving obligations apply.

6. PROCESSING OF PERSONAL DATA FROM APPLICANTS

Responsible companies depending on the company posting the job:
Alpina Parking Deutschland GmbH
Alpina Parking Stachus GmbH
Alpina Consulting GmbH
Alpina Parking Properties GmbH

If you send us your personal data in connection with an application for a vacancy at one of our companies or as an unsolicited application, this is done on a voluntary basis. The data of an application may include the following: Personal data (first and last name, date of birth, address, possibly even information on family members), communication data (e-mail address, cell phone and landline number, Skype name), data on a previous career (school, training and work references), information on other qualifications, areas of interest, personal preferences, future aspirations, information on desired salary and earliest possible start date/termination period, application photo.

We will use the information you provide exclusively to process your application for the advertised vacancy or, in the case of a speculative application, to review all vacancies at one of our companies in order to check the conclusion of an employment contract with you in accordance with Art. 6 para. 1 lit. b) GDPR. Only persons involved in the application process will receive knowledge of your personal data. All your data will be deleted immediately, three months after completion of the specific application/testing process. This does not apply if legal provisions prevent deletion and further storage is necessary for the purpose of evidence or if you have expressly agreed to longer storage, e.g., for the consideration of future job placements. You can object to the use of your data for the aforementioned purposes at any time or request that your data be deleted.

Valid: July 2022