Uniplan GmbH & Co. KG
Schanzenstraße 39 a/b 51063 Köln
T +49 221 845 690
Contact details of the Data Protection Officer
Our Data Protection Officer is available for queries under the above address with the addition “Data Protection Officer”, or by email at firstname.lastname@example.org.
All picture credits: Uniplan
Images "Offices" / City: Fabian Stuertz
Images "People": Marie Schmidt
Images "Work" / Frankfurt Book Fair: Marie Préaud
Image historical Hong Kong: Sue Jimenez, 1986
Work "Point of no return" by Heiner Blum
When do we process personal data?
We process the personal data which you actively transmit to us by online submission. Furthermore, we automatically process personal data based on your use of our website. Your data may therefore be processed, in particular, in the following cases:
/ Visit of our website;
/ Applying for a job;
/ Contacting us;
/ Analysis of which visitors access our website and how they use it;
/ Defence against attacks on our technical infrastructure;
For details, please read the following explanations.
Visit of our website
When you access our website, the company commissioned by us to operate the website processes and stores technical information about the terminal you use (operating system, screen resolution and other, non-personal features) and the browser (version, language settings), and particularly also the public IP address of the computer you use to access our website, as well as the date and time of access. The IP address is a distinct, numerical address under which your terminal sends and/or requests data to or from the internet. We and our service provider do not normally know the identity of the person behind the IP address, unless you disclose data to us during your use of the website which enable us to identify you. Users may also be identified if legal proceedings have to be taken against them (e.g. where our website is attacked) and we learn of their identity in the context of the investigations. You therefore do not normally need to worry about us being able to allocate your IP address to you personally.
Our service provider uses the processed data in non-personal form for statistical purposes, in order to enable us to understand which terminals and which settings are used to visit our website and to optimise the website where necessary. The statistics do not contain personal data. The legal basis for the production of statistics is Article 6 (1) f) GDPR.
Your IP address is also used to enable you technically to access and use our website and for the detection and defence against attacks on our service provider or our website. Unfortunately, attacks with the aim of causing damage to website operators or their users do occur (e.g. denial of access, spying on data, disseminating malware (e.g. viruses) or other illicit purposes). Such attacks would compromise the proper functioning of the data centre of the company commissioned by us, the use of our website and/or its functionalities, and the security of visitors to our website. IP addresses and the time of access are processed for the purpose of defending against such attacks. Via our service provider, we use this processing to pursue our legitimate interest to secure the functioning of our website and defend against illegal attacks against us and the visitors to our website. The legal basis for processing is Article 6 (1) f) GDPR.
The stored IP data are deleted (by way of anonymisation) when they are no longer needed for the detection or defence against an attack.
Contact requests / Chat
When you send us a message through one of the contacting options offered we use the data you submit to us to process your enquiry. The legal basis for this is our legitimate interest to respond to your enquiry pursuant to Article 6 (1) f) GDPR. If your enquiry relates to the conclusion of a contract with us, a further legal basis for the processing is Article 6 (1) b) GDPR. The data are deleted once your enquiry has been dealt with. Where we are under a statutory obligation to retain the data for longer, they will be deleted following expiry of the applicable retention period.
Delivery of videos
For the showing the videos on our website we use Azure by Microsoft. This allows us for our global website, that the videos are available worldwide from servers that are as close as possible to the visitor to our website. Playing videos on a website involves a significant amount of data, especially when different visitors watch videos in parallel. It also speeds up video playback and improves its playback quality when playing from a server as close as possible to the site visitor. We can not guarantee this ourselves due to the considerable technical effort involved. For this reason, we use this infrastructure of Microsoft Azure legal basis for this is Art. 6 para 1 f) DSGVO.
Delivery of images and use of a so-called content management system
For the delivery of the pictures on our website and the administration of its additional content (in particular texts) we use products of Prismic.io. This allows us to have the photos available on our global website from servers that are as close as possible to the visitors to our website. Photos or videos are associated with significant amounts of data, especially when many visitors visit our website in parallel. We cannot guarantee this by ourselves due to the considerable technical effort involved. That's why we use Prismic.io infrastructure for this. The legal basis for this is Article 6 (1) (f) GDPR.
We are always happy about new colleagues! If you apply for one of the positions offered by us, or on your own initiative, we will process your data for the purposes of the application process and for the decision on the creation of an employment relationship. The legal basis of the processing is § 26 BDSG and subordinated Art. 6 para. 1 f. DSGVO.
Should we unfortunately not consider your application, we will delete your application including the submitted documents two months after our refusal, if further storage is not in our legitimate interest in order to comply with our statutory obligations, e.g. according to the General Equal Treatment Act (AGG). In this case, the deletion takes place with elimination of the reason. Legal basis of further storage is § 26 BDSG and subordinated Art. 6 (1) f) DSGVO.
By withdrawing your application, you can object to the further processing of your data at any time.
If we establish employment with you, there will be separate information about the processing of your data and the rights to which you are entitled.
A cookie is a small text file which is stored on your terminal by your browser when you access our website. If you visit our website again at a later time we are able to read these cookies again. Cookies are stored for varying lengths of time. You have the option at any time to configure in your browser which cookies you would like your browser to accept; however, this may result in our website malfunctioning. You may also delete cookies yourself at any time. If you do not do this we may specify when the cookie is set how long we wish the cookie to remain on your computer. Here we distinguish between so-called session cookies and persistent cookies. Session cookies are deleted by your browser when you leave our website or close the browser. Persistent cookies are stored for the period of time specified by us when the cookie is set.
/ Technically required cookies, which are strictly necessary to use the functions of our website. Without these cookies, certain functions cannot be provided.
/ Functional cookies, which are used to enable the technical implementation of certain functions you wish to use.
/ Analysis cookies, which serve the purpose of analysing use of our website. Please read the information about Google Analytics for details.
Most browsers used by our users allow you to configure which type of cookie should be saved and enable the deletion of (specific) cookies. If you limit the setting of cookies on particular websites or reject any cookies from third-party websites you may not be able to use our website to the full extent. Information about cookie settings in the most common browsers can be found here:
/ Google Chrome (support.google.com/chrome/answer/95647?hl=de)
Google Analytics allows us to create user statistics about our website in non-personalised form and to collect demographic data about visitors and their usage behaviour. Furthermore, statistics are produced which help us to understand how users find our website, in order to improve our search engine optimisation and our advertising campaigns. This processing serves our legitimate interest to improve our website and advertising campaigns. The legal basis for processing is Article 6 (1) f) GDPR.
The pseudonymous data are deleted after 26 months.
At http://tools.google.com/dlpage/gaoptout?hl=de, Google provides information about how to object to the use of Google Analytics.
As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent the collection by Google Analytics within this website in the future (the opt-out works only in the browser and only for this domain). An opt-out cookie is stored on your device. If you delete your cookies in this browser, you must click this link again.
Google is a party to the PrivacyShield agreement and has concluded a third-party data processing agreement on Google Analytics with us.
Right to information
According to Article 15 GDPR, you have the right to request that we confirm whether any personal data concerning your person is being processed by us. If this is the case, you have the right to be informed about this personal data and to further information specified in Article 15 GDPR.
Right to correction
According to Article 16 GDPR, you have the right to demand the immediate correction of incorrect personal data concerning your person. Taking into consideration the purpose of processing, you also have the right to demand the completion of incomplete personal data, including by way of a supplementary explanatory note.
Right to erasure
You have the right to demand that we immediately delete any personal data concerning your person. We must delete personal data without undue delay, provided the corresponding conditions of Article 17 GDPR apply. For details, please refer to Article 17 GDPR.
Right to restrict processing
According to Article 18 GDPR, you have, under certain conditions, the right to demand a restriction of our processing of your personal data.
Right to data portability
According to Article 20 GDPR, you have the right to obtain, in a structured, commonly used and machine-readable format, the personal data concerning your person which you have provided, and you have the right to transmit these data to another controller without hindrance by us, provided the processing is based on consent pursuant to Article 6 (1) a) GDPR or Article 9 (2) a) GDPR or on a contract pursuant to Article 6 (1) b) GDPR and the processing is performed by automated processes.
Right to object
According to Article 21 GDPR, you have the right to object to the processing of personal data concerning your person which takes place on the basis of Article 6 (1) e) or f) GDPR; this also applies to any profiling based on these provisions.
Where we process your personal data to perform direct advertising, you have the right at any time to object to the processing of personal data concerning your person for the purposes of such advertising; this also applies to profiling in connection with such direct advertising.
If you wish to exercise one of your rights, please contact us as the controller using the above contact details or use another contact option offered by us to notify us accordingly. If you have any questions, please do not hesitate to contact us.
Right to complain to a supervisory authority
According to Article 77 GDPR, you have the right, without prejudice to any other administrative or judicial legal remedy, to complain to the supervisory authority. This right may particularly be exercised in the member state of your place of residence, your place of work or the place of the alleged breach, if you believe that the processing of the personal data concerning your person breaches the GDPR.
Uniplan GmbH & Co. KG
Prof. Dr. h.c. Roland Berger,
Uniplan GmbH & Co. KG
Schanzenstrasse 39 a/b
51063 Cologne, Germany