We, BaseCamp Group Ltd., London, collect, store and process your personal data in accordance with the applicable data protection laws. In this privacy statement, we will explain what types of data we are processing, for which purposes, and what rights you are entitled to.
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is BaseCamp Group Ltd., c/o Hammond Bale LLP, 19 Berkeley Street, London W1J 8ED, England, email: email@example.com.
1. Collection, storage and use of personal data
The visit of our website is always possible without the input of personal data. Personal data is information that can be attributed to your person. This includes, in particular, personal details such as name, address, email address, telephone number and date of birth. We collect, store and process your personal data, if you have notified us on a voluntary basis by way of a registration, a contact / chat request or when concluding a rental contract.
We do not share your personal data with third parties. In case of conclusion of a rental agreement via the booking portal on our website, we do not save your data, but the respective national company, with which you conclude the lease, saves, processes and uses your data within the framework of the lease (see further explanation in section 1.3).
1.1 Registration and use of the portal “My BaseCamp“
Description and scope of data processing: When you register on the website for setting up a user account, we collect, save and use the data entered in the registration form in particular your first and your last name, your telephone number, your email address and your password. At the time of registration, your IP address and the date and time of your registration are automatically saved.
If you use the “My BaseCamp” communication portal provided via the website, the content of your communication with other registered users is not saved; we are only responsible for maintaining the content on the portal over a reasonable amount of time.
Legal basis for data processing: Registration is required for the conclusion of a rental agreement and therefore serves to carry out pre-contractual measures. The legal basis for the processing of data is thus Art. 6 para. 1 lit. b GDPR. The legal basis for the processing of automatically collected data is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing: The data will be processed to set up and maintain your user account, to access it and to use it for the purpose of establishing a rental relationship.
The data processed automatically during the registration process serves to ensure misuse of the registration form and the registration process as well as the security of our IT systems.
Period of storage: The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. You have the option of deleting your user account yourself at any time via our website. Your data stored during the registration process will then be deleted, unless it is still used to carry out your lease. For the storage of the data for the execution of your tenancy the following remarks under section 1.3 apply.
1.2 Inquiries via our contact form, use of chat
Description and scope of data processing: If you send us a message via our contact form or via the chat function, we collect and store data requested via the form field to process your request. The following data is collected via the contact form and transmitted to us: your first and last name, your e-mail address and telephone number, your university, the location of your BaseCamp apartment and the text of your message. The chat form (from PureChat, see section 3.2.3 below) will collect your name, e-mail address and the text of your message.
Your IP address and the date and time of your request will also be automatically saved during the sending process.
Legal basis for data processing: The legal basis for processing data collected via the contact or chat form is Art. 6 para 1 lit. f GDPR. Our legitimate interest is to answer your request. If the establishment of contact is aimed at the conclusion of a lease, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
Purpose of data processing: The purpose of data processing is solely to process your request. We also use data from the chat form in anonymous form for analysis purposes (see section 3.2.3 below).
The data processed automatically during the registration process serves to ensure misuse of the registration form and the registration process as well as the security of our IT systems.
Period of storage: The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data that you have sent us via the contact or chat form, this is the case when the conversation with you has ended, unless contractual or legal obligations prevent deletion. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been finally clarified. We delete your data six months after your request.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
1.3 Concluding a rental agreement
Description and scope of data processing: You can rent a room in one of our BaseCamps directly through the booking portal. Leases are concluded with the company of BaseCamp which has its registered office in the respective country of the BaseCamp. This company, i.e. your rental agreement partner, stores and uses data communicated within the framework of the rental contract for the execution of the contract.
As part of the rental agreement, further contracts with BaseCamp partners, for example for use of IT infrastructure, can be concluded. The collection, storage and use of your data for the execution of such supplementary agreements is regulated in the respective contracts.
Legal basis for data processing:
The legal basis for processing is Art. 6 para. 1 lit. b GDPR, as a contractual relationship is established and processed with the data.
Purpose of data processing: The collection, storage and use of the data transmitted within the framework of the conclusion of a rental agreement serve exclusively for the conclusion and execution of the rental agreement.
Period of storage: The data will be stored for the duration of the contractual relationship and at least for the duration of two further years from contract termination for the assertion and processing of possible repair, renovation and other rights against you as tenant. If a request for the deletion of data is then contrary to tax or commercial data retention obligations, your data will be made anonymous.
2. Storing and processing data in protocol files
Description and scope of data processing: When you visit the website, the following data are thereby regularly stored and processed in form of protocol data, so-called log files:
– Call (Request) and IP address (internet protocol address) of the accessing computer
– Date and time of the call
– Browser type and language.
Legal basis for data processing: The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing: This data is stored as a technical precaution for the protection of data processing systems against unauthorized access. No other use or transfer to third parties takes place. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.
Period of storage: The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case after three months at the latest.
3. Use of temporary session cookies
The following data is stored in the cookies:
– Language setting
– Log-in information
You can view and delete cookies stored on your computer and check handling of cookies in general via your internet browser’s settings. For more information, please contact your browser or use your internet browser’s help function. Please note that the functionality of our website may be restricted or unavailable, if you do not allow cookies.
3.1 Google Tag Manager
Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The Google Tag Manager itself (which implements the tags) is a cookie-free domain, does not collect any personal data and triggers other tags that may collect data. Google Tag Manager does not access this data. If deactivated at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager. For more information, see the Google Tag Manager usage guidelines at: http://www.google.de/tagmanager/use-policy.html.
3.2 Website Analysis
3.2.1 Use of Google Analytics with IP anonymization
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to the website’s use and the internet for the Site Operator. The IP address provided by Google Analytics from your browser will not be merged with other Google data. By using this website, you agree to the processing of data collected by you through Google and the above-described manner of data processing as well as the stated purpose.
You can prevent storage of cookies by a corresponding setting in your browser software; however, we point out that in this case you may not be able to fully utilize all of our website’s functions.
You can also prevent Google’s collection within this site by setting an opt-out cookie. Please go to the following link. An opt-out cookie is stored on your device. If you delete your cookies, click on this link again.
For more information on usage conditions and data protection, please visit www.google.de/analytics/terms or www.google.de/policies.
The analysis tool of Smartlook, a service of Smartsupp.com,s.r.o., Milady Horakove 13, 602 00 Brno, Czech Republic, is also used. Smartlook uses the cloud-based solution of Amazon Web Services (AWS) with servers in Frankfurt am Main, Germany, for data storage and has corresponding contractual agreements for data security with AWS.
3.2.3 Pure Chat
This website uses technology from Pure Chat, Inc. 13835 N Northsight Blvd. Suite 205 Scottsdale AZ 85260, USA (www.purechat.com) to collect and store anonymous information for web analytics and to operate the live chat system to respond to live support requests. These anonymous data can be used to create user profiles under a pseudonym. The data collected with Pure Chat technologies will not be used to personally identify the visitor to this website and will not be combined with personal data about the bearer of the pseudonym.
3.3 Website Marketing
3.3.1 DoubleClick by Google
The information generated by the cookies is transmitted by Google to a server in the USA for analysis and stored there. We have no influence on the extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating DoubleClick, Google receives the information that you have called the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may find out and save your IP address.
3.3.2 Google AdWords Conversion Tracking and Dynamic Remarketing
We also use Google Conversion Tracking, another Google analysis service. Google AdWords sets a cookie on your computer (“conversion cookie”) if you have reached our website via a Google ad. These cookies expire after 30 days and are not used for personal identification. They only serve to recognize that you have clicked on one of our ads and have been redirected to our website. Each AdWords customer receives a different cookie. Cookies cannot therefore be traced through the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that personally identifies users.
You can permanently object to cross-device remarketing/targeting by disabling personalized advertising in your Google Account; follow this link: https://www.google.com/settings/ads/onweb/. Further information and the data protection regulations can be found in Google’s data protection declaration at: http://www.google.com/policies/technologies/ads/.
Legal basis for data processing: If personal data are processed using technically necessary cookies, the legal basis is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing: The purpose of using technically necessary cookies is to simplify the use of websites.
The analysis and marketing tools are used to improve the quality of our website and its content. Through the analysis and marketing cookies we learn how the website is used and can thus continuously optimize our offer.
The data collected within the framework of Google Analytics is automatically deleted after 14 months. The deletion of data whose retention period has been reached is carried out automatically once a month by means of a corresponding setting on Google.
4. Employing Social Plugins
On our website, so-called social plugins of different social networks are integrated. These are internet bookmarks, which allow you to share the content of our website with other users of the respective social network.
The following social plugins are used on our website:
If you visit our website, which contains one of the mentioned social plugins, a direct connection is established with the server of the respective social network, and from there the image of the plugin visible to you as well as the associated functions are sent directly to your browser, which will integrate you into the presentation of our website. If you are logged in to one of the above social networks at this time, the information about your visit to our website will be transferred there and can be assigned to your user account. If you are using a social plugin, the content of our website will be linked to your profile in the social network of the confirmed plugin. The information is also published on the social network, on your Twitter or Instagram account, and to your contacts there.
If you do not wish this data to be transferred, you must log out of the social network before visiting our website.
Even if you are not a member of the aforementioned social networks, or you have logged out before visiting our website, it cannot be guaranteed that at least your IP address will be transmitted and stored by a social network’s operator.
The providers may use this information for the purpose of advertising, market research and appropriate design of your pages. To this end, providers will create usage, interest and usage profiles, for example, to evaluate your use of our website regarding your advertised advertisements, to inform other users about your activities on our website and to provide further information on the use of the Services. We have no influence on the processing of your data by the operators of social networks. Information on how to deal with your data by third-party providers can be found in the data protection guidelines under above mentioned links.
5. Integration of Google Maps
Our website also uses Google Maps as part of the overview of our locations and affiliated dealers. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function.
Description and scope of processing: By visiting the website, Google receives the information that you have called up the corresponding subpage of our website. In addition, the data mentioned under section 2 “Storing and processing data in protocol files” are transmitted. This is regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
Legal basis for processing: The legal basis for the processing of personal data is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing: The integration of Google Maps serves solely to offer you an overview of the locations of our business premises.
Duration of storage: If you wish to have your data deleted by Google, please refer to the Google data protection declaration stated above.
6. Your rights
If your personal data are processed, you are affected within the meaning of the GDPR and you have the following rights:
Right of access: Upon request, we will provide you with information pursuant to Art. 15 GDPR about the data stored about you, the origin, the recipient, the duration and purpose of storage and about your rights as an affected person. For further information, please contact BaseCamp Group Ltd., c / o Hammond Bale LLP, 19 Berkeley Street, London, W1J 8ED, England, E-mail: firstname.lastname@example.org.
Right of revocation: If you have given us a separate consent for the use of your data for advertising purposes, you can revoke this consent at any time at the above-mentioned location with future effect.
Right to correction: According to Art. 16 GDPR you have the right to immediately demand the correction of incorrect or complete personal data stored by us.
Right of cancellation: In accordance with Art. 17 GDPR, you have the right to request the cancellation of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
Right of restriction: According to Art. 18 GDPR you have the right to request the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it, and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have filed an objection to the processing in accordance with Art. 21 GDPR.
Right to data transferability: According to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another person responsible.
Right of appeal: According to Art. 77 GDPR you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our head office.
Right of objection: You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data in accordance with Art. 6 para. 1 lit. e or lit. f of the GDPR. This also applies to profiling based on these provisions.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.
7. Data security
We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. Usually this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form is indicated by the closed display of the key or lock symbol in the lower status bar or the address line of your browser.
We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
8. Changes to our data protection information
We reserve the right to occasionally adapt this data protection information so that it always complies with current legal requirements or to implement changes to our services in the data protection information, e.g. when introducing new services. When you return to our website, the current data protection information applies.
Last updated: May 2018