Data Privacy Policy

§ 1 Information on the collection of personal data
In the following section, we provide information about the collection of personal data when our website is used. Personal data is all information that relates to you personally, such as your name, address, email addresses, and user behavior. In accordance with Art. 4 Para. 7 of the EU General Data Protection Regulation (GDPR), the controller is

JustStay GmbH
Neuer Zollhof 1
40221 Düsseldorf, Germany

Tel: +49 (0)211 54 59 17 77
Email: info@juststay.de
Managing director: Dr. Christoph Hamann

You can reach our Data Protection Officer at datenschutz@juststay.de or our postal address with the addition of “Attn: Data Protection Officer.”

When you contact us by email or through a contact form, we will store the information that you have given us (your email address, possibly your name and telephone number) in order to respond to your questions. We will delete the information that results within this context after it is no longer necessary to store it or we will restrict the processing in the case of legal retention obligations.

In the case that we revert to contracted service-providers for individual functions of our offer or would like to use your data for promotional purposes, we will inform you in detail about the respective processes, as shown below. If we do so, we will also inform you about the established criteria for the storage period.

§ 2 Your rights
You have the following rights in relation to us with regard to the personal data that relates to you:

• right to information
• right to rectification or erasure
• right to restriction of processing
• right to object to processing
• right to data transferability
• In addition, you have the right to complaint to a supervisory authority for data protection about the processing of your personal data by us.

§ 3 Collection of personal data from visitors to our website
For the simple informational use of the website, which means when you do not register or send us any other information, we only collect the personal data that your browser sends to our servers. If you would like to look at our website, we collect the following data that is technically necessary for us to show you our website and ensure its stability and security (legal basis is Art. 6 Para. 1 P. 1 lit. f of the GDPR):

• IP address
• date and time of the inquiry
• time zone difference with Greenwich Mean Time (GMT)
• content of the request (actual page)
• access status/HTTP status code
• respective transferred data amount
• website from which the request comes
• browser
• operating system and its interface
• language and version of the browser software

In addition to the above-mentioned data, our cookies will be stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive by the respective browser that you use and send specific information to the place (which means us in this context) that has set the cookie. Cookies cannot execute programs or transmit viruses to your computer. They serve to make the internet offer more user-friendly and effective as a whole. This website uses the following types of cookies, the scope and functioning principles of which are explained in the following:

• transient cookies
• persistent cookies

Transient cookies are automatically deleted when you close the browser. In particular, this includes the session cookies. These store a session ID, with which you can have various inquiries of your browser classified into a joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
Persistent cookies are automatically deleted after a set amount of time, which can vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.
You can configure your browser settings according to your wishes and reject the acceptance of third-party cookies or all cookies, for example. If you do so, we would like to point out that you may not be able to use all functions of this website.

§ 4 Minors
Persons younger than 18 years should not transmit personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and adolescents, do not collect it, and do not pass it on to third parties.

§ 5 Further functions and offers of our website
In addition to the purely informational use of our website, we offer various services that you can use if you are interested in them. To do this, you must generally enter further personal data that we use to check whether the respective service can be used and that is required for the above-mentioned principles of data processing.
We sometimes use external service providers to process our data. We carefully select and commission them, they are bound to our instructions, and we monitor them on a regular basis.
Furthermore, we may pass your personal data on to third parties when we offer participation in promotions, contests, the conclusion of a contract, or similar services in cooperation with partners. You can receive more detailed information when submitting your personal data or in the description below the offer.
In so far as our service providers or partners have their headquarters in a country outside of the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.

§ 6 Objecting to or revoking the processing of your data
If you have granted permission for the processing of your data, you can revoke it at any time. Such a revocation influences the permissibility of processing your personal data after you have given it to us.
In so far as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is especially the case when the processing is not necessary to fulfill a contract with you, which we describe respectively in the following description of the functions. When exercising such an objection, we kindly request a description of the reasons why we should not process your personal data. In the case of your justified objection, we will check the situation and either stop and/or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
You can obviously object to the processing of personal data for the purposes of advertising and data analysis at any time. You can submit your advertising objection to the following email address: datenschutz@juststay.de.

§ 7 Use of Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses “cookies,” which are text files that are stored on your computer and make it possible to analyze the use of the website by you. The information about your use of this website generated by the cookie is usually transmitted to a server owned by Google in the USA and stored there. In the case that IP anonymization is activated on this website, your IP address will be shortened in advance by Google within the member states of the European Union or in other contractual signatories of the European Economic Area agreement. Only in exceptional circumstances will the full IP address be transmitted to a server of Google in the USA and shortened there. At the request of this website’s operator, Google will use this information to evaluate your usage so that it can compile reports on the website activities and provide further services connected with the website’s use and Internet use to the website operator.
The IP address transmitted by your browser within the scope of Google Analytics will not be associated with other data by Google.
You can prevent the storage of the cookies through a corresponding setting in your browser software; however, we must inform you that you will not be able to use all of the functions of this website to the full extent in this case. In addition, you can prevent the collecting of the data produced by the cookie and related to your use of the website (incl. your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
We apply Google Analytics to analyze the use of our website and improve it on a regular basis. Through the acquired statistics, we can improve our offer and design it in a more interesting way for you as a user. In the case of exceptions in which personal data is transmitted to the USA, Google has subjected itself to the EU-US Privacy Shield at www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 Para. 1 P. 1 lit. f of the GDPR.
Information about the third-party supplier: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: https://marketingplatform.google.com/about/analytics/terms/de/; Overview on data protection: https://marketingplatform.google.com/about/, as well as the data protection declaration: https://policies.google.com/privacy?hl=de&gl=de.

§ 8 Integration of Google Maps
We offer the use of Google Maps on this website. This allows us to show you interactive maps directly in the website and makes it possible for you to conveniently use the map function.
Through your visit on the website, Google receives the information that you have called up the corresponding subpage of our website. In addition, the data mentioned under Section 3 of this declaration are transmitted. This happens independent of whether Google provides a user account through which you are logged in or no user account exists. When you are logged in with Google, your data will be directly associated with your account. If you do not want to be associated with your profile at Google, you must log out prior to activating the button. Google stores your data as a use profile and utilizes it for purposes of advertising, market research, and/or for the needs-based design of its website. Such an analysis occurs especially (even for users who are not logged in) for providing needs-based advertising and informing other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
You can find further information on the purpose and scope of the data collection and its processing through the plug-in provider in the provider’s data privacy policy. This is also where you can receive further information about your rights in this regard and configuration options to protect your private sphere: https://policies.google.com/privacy?hl=de&gl=de. Google also processes your personal data in the USA and has subjected itself to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

§ 9 Use of Google AdWords Conversion
We use the service of Google AdWords to draw attention to our attractive offers on external websites with the help of advertising media (“Google AdWords”). In relation to the data of the advertising campaign, we can determine how successful the individual advertising measures are. The purpose of this is to display advertising that is interesting to you, to design our website to be more interesting to you, and attain a fair calculation of the advertising costs.
These advertising media are delivered by Google through ad servers. For this purpose, we use ad server cookies that can be measured through the specific parameters for success measurement such as displaying the ads or user clicks. In so far as you reach our website through a Google ad, a cookie will be stored in your PC by Google AdWords. These cookies generally lose their validity after 30 days and are not intended to identify you personally. The following information is generally stored with this cookie as analytical values: the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (marking that the user no longer wants to be addressed).
These cookies make it possible for Google to recognize your Internet browser. In so far as you visit certain website pages of an AdWords customer and the cookie stored on your computer has not yet expired, Google and the customer can recognize that you have clicked on the ad and were redirected to this page. Every AdWords customer is associated with a different cookie. So cookies cannot be tracked through the websites of AdWords customers. We do not collect and process any personal data in the above-mentioned advertising measures on our own. We solely receive a statistical analysis that is provided by Google. On the basis of this analysis, we can we recognize which of the applied advertising measures are especially effective. We do not receive any additional data from the use of the advertising media; in particular, we cannot identify the users on the basis of this information.
On the basis of the marketing tools that are used, your browser automatically sets up a direct connection with the Google server. We have no influence on the extent and further use of the data that is collected through the application of this tool by Google. Consequently, we provide you with information according to our present knowledge: Through the integration of AdWords conversion, Google receives the information that you have called up the corresponding part of our website or clicked on one of our ads. In so far as you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google and/or you have not logged in, there is the possibility that the provider of your IP address becomes aware of it and stores it.
You can prevent participation in this tracking process in various ways: a) through a corresponding setting of your browser software; especially the suppression of third-party cookies will result in you no longer receiving ads from third-party suppliers; b) through deactivating the cookies for conversion tracking by setting your browser so that cookies from the domain “www.googleadservices.com” are blocked; https://adssettings.google.de/authenticated, whereby this setting is deleted when you delete your cookies; c) through deactivating the interest-related ads of the provider that are part of the self-regulating campaign “About Ads,” through the link www.aboutads.info/choices, but this setting is deleted when you delete your cookies; d) through the permanent deactivation in your Firefox, Internet Explorer, or Google Chrome browsers under the link https://support.google.com/ads/answer/7395996. We would like to point out that you will not be able to use all functions of this offer to their full extent in this case.
The legal basis for processing your data is Art. 6 Para. 1 P. 1 lit. f of the GDPR. You can find additional information on data protection at Google here: https://policies.google.com/privacy?hl=de and service.google.com/sitestats/de.html. As an alternative, you can visit the website of the Network Advertising Initiative (NAI) at https://www.networkadvertising.org/. Google has subjected itself to the EU-US Privacy Shield at https://www.privacyshield.gov/EU-US-Framework.

§ 10 Social Plugins
We use the following plugins from Facebook, Pinterest, and Twitter on our website.

Facebook social plugins: The website contains social plugins (“plugins”) of the social network www.facebook.com, which is operated by Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA (“Facebook”). The plugins are marked with a Facebook logo or the addition of “Facebook social plugin” (http://developers.facebook.com/plugins). The website contains such plugins, through which your browser sets up a direct connection with Facebook’s servers as soon as you call up the website. The content of the plugin is sent from Facebook directly to your browser and integrated into the website by it. JustStay has no influence on the extent of the data that Facebook collects with the help of this plugin.
Through the integration of the plugin, Facebook receives the information that you have called up the corresponding website. If you are logged into Facebook, Facebook can associate the visit with your Facebook account. When you click on the “Like” button or leave a comment, the corresponding information is sent directly from your browser to Facebook and stored there.
According to its own statements (https://www.facebook.com/help/186325668085084), Facebook stores the date and time of visits to the page, the website visited, and further technical data such as IP address and browser-related data in order to further optimize the services of Facebook. The purpose and extent of the data collection, further processing, and use of the data by Facebook, as well as the respective rights and configuration options for protection of the private sphere can be referred to under Facebook’s information on data protection (https://www.facebook.com/about/privacy/).
If you are a member of Facebook and do not want Facebook to collect data about you through JustStay and link it with your member data stored at Facebook, you must log out of Facebook before visiting the website. However, even if you are not registered at Facebook, there is still the possibility that Facebook will learn about certain data and store it.
If you want to generally block the Facebook social plugin, you can install and activate a corresponding browser extension, such as the “Facebook Blocker” (http://webgraph.com/resources/facebookblocker/).
Instagram social plugins: The social plugins (“plugins”) of Instagram, operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”), are used on our website. The plugins are marked with an Instagram logo in the form of an “Instagram camera,” for example. When you call up a page of our website that contains such a plugin, the browser sets up a direct connection with the Instagram servers. The contents of the plugin are sent directly to your browser by Instagram and integrated into the page. Through this integration, Instagram receives the information that the browser has called up the corresponding page of our web presence, even if you do not have an Instagram profile or are not logged into Instagram at that moment. This information (including your IP address) is transmitted from the browser directly to an Instagram server in the USA and stored there. If you are logged into Instagram, Instagram can directly associate your visit to our website with your Instagram account. When you interact with the plugin by clicking on the “Instagram” button, for example, this information is also transmitted directly to an Instagram server and stored there. In addition, the information is published on your Instagram account and shown under your contacts there. JustStay has no influence on the extent of the data that Instagram collects with the help of this plugin.
The purpose and extent of the data collection, further processing, and use of the data by Instagram, as well as the respective rights and configuration options for protection of your private sphere can be referred to under Instagram’s information on data protection: https://help.instagram.com/155833707900388/. If you do not want Instagram to associate the collected data directly with Instagram after visiting our web presence, you must log out of Instagram before visiting our website. You can also completely prevent the loading of the Instagram plugin by using add-ons for your browser such as the script-blocker “NoScript” (http://noscript.net/), for example.
Pinterest social plugins: Our website uses social plugins (“plugins”) of the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA (“Pinterest”). The plugins can be recognized as buttons with the sign “Pin it” on a white or red background, for example. When you call up a page of our website that contains such a plugin, the browser sets up a direct connection with the Pinterest servers. The contents of the plugin are sent directly to your browser by Pinterest and integrated into the page. Through this integration, Pinterest receives the information that the browser has called up the corresponding page of our web presence, even if you do not have a Pinterest profile or are not logged into Pinterest at that moment.
This information (including your IP address) is transmitted from the browser directly to a Pinterest server in the USA and stored there. If you are logged into Pinterest, Pinterest can directly associate the visit to our website with your Pinterest account. When you interact with the plugin by clicking on the “Pin it” button, for example, this information is also transmitted directly to a Pinterest server and stored there. In addition, the information is published on your Pinterest account and shown under your contacts there. The purpose and extent of the data collection, further processing, and use of the data by Pinterest, as well as the respective rights and configuration options for protection of your private sphere can be referred to under Pinterest’s information on data protection: about.pinterest.com/de/privacy-policy. If you do not want Pinterest to associate the collected data directly with Pinterest after visiting our web presence, you must log out of Pinterest before visiting our website. You can also completely prevent the loading of the Pinterest plugin by using browser add-ons such as the script-blocker “NoScript” (http://noscript.net/), for example.
Twitter buttons: Furthermore, the website offers the possibility creating posts and the like on Twitter. This service and correspondingly configured plugins are offered by Twitter, Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. With the “Tweet” button, it is possible for you to share blog articles over Twitter. The button also shows the number of Tweets on one blog article.
Upon loading the website, the code of the Tweet buttons is directly requested by a Twitter server through your browser and integrated into the website. JustStay therefore has no influence on the extent of the data called up by Twitter. According to its own statements (https://twitter.com/privacy), Twitter stores the Tweet’s transmitted message and its metadata. According to the operator’s estimation, this includes: Date and time of the Tweet, the concrete or possible shortened Internet address where the Tweet button is located, and further technical data such as the IP address, the browser type, and the operating system. Twitter does not share information on how long the data is stored. Further information from Twitter can be found here (https://twitter.com/privacy).

§ 11 Links to other websites
The website can occasionally contain links (interactive links) to the websites of third parties, for which JustStay is not responsible. JustStay has no influence whatsoever on the contents and design of the linked external pages and/or the websites that you reach through these links. The respective providers are exclusively responsible for the contents and design of these websites, as well as compliance with the regulations regarding data protection laws.

§ 12 Online reservation
In order for you to book your stay with us conveniently online, we use the booking engine of Viato (Viato GmbH, Burkheimer Str. 3, 79111 Freiburg, Germany). Your data will only be collected, processed, and used for the establishment, implementation, and completion of the contractual relationship based on the reservation. You can find further information in Viato’s data privacy policy at https://viato.travel/datenschutz/.
If you would like to book an overnight stay with us online, is it necessary for you to provide your personal data that we require for completing your order at the time of concluding a contract. The mandatory details required for the completion of the contract are specially marked; further information is voluntary. We process the data that you give us for the completion of your order. For this purpose, we can pass your payment data on to our principal bank. The legal basis for this is Art. 6 Para. 1 P. 1 lit. b of the GDPR.

§ 13 Contact form
You have the possibility of reaching us through our contact form. The entry of data occurs expressly on a voluntary basis. The personal data provided will be treated confidentially and used for the stated purpose according to the respectively valid legal data protection regulations. We do not share this data with any third parties outside of our company.

§ 14 Security
JustStay uses technical and organizational security measures to protect the data that you have made available from coincidental or deliberate manipulations, loss, destruction, or access by unauthorized persons. These security measures are continuously improved in keeping with technological developments. Moreover, all employees and vicarious agents are obligated to respect the data secrecy of the German Federal Data Protection Act.

§ 15 Changes to this data protection declaration
JustStay reserves the right to change this data privacy policy. The most current version of the data privacy policy is always accessible on the JustStay website at https://www.juststay.de/datenschutz/.

Status February 2020