Data Policy

Privacy Policy

We appreciate your interest in our company. The protection of your personal data is very important to us. Below, we inform you in accordance with Art. 13 of the GDPR about the processing of your personal data when you visit our website.

Controller in the sense of GDPR

Studio 49 Hospitality GmbH
Lindower Strasse 18
13347 Berlin
E-Mail: hello@studio-49.com

Purposes of Data Processing

We process personal data of website visitors only to the extent necessary to provide a functional website and our content and services.

Legal Basis for Processing

Processing is carried out on the following legal bases:

  • Art. 6(1)(a) GDPR – Consent (e.g., for cookies or contact forms),
  • Art. 6(1)(b) GDPR – Performance of a contract or pre-contractual measures,
  • Art. 6(1)(c) GDPR – Legal obligation,
  • Art. 6(1)(f) GDPR – Legitimate interest in the secure and efficient operation of our website and services.

Collection and Storage of Personal Data and Nature and Purpose of Use

When visiting the website:
When you access our website, the browser automatically transmits the following data to our server, which is temporarily stored in a log file:

  • IP address of the requesting device,
  • Date and time of access,
  • Name and URL of the accessed file,
  • Referrer URL (previously visited site),
  • Browser used and, if applicable, your operating system.

These data are processed for the following purposes:

  • Ensuring a smooth connection,
  • Ensuring comfortable use of the website,
  • Evaluating system security and stability.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as contact form inquiries, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https” in your browser’s address bar and the lock icon.

Use of Cookies and Consent Management

Our website uses cookies. Some are technically necessary, others serve statistical or marketing purposes.

We use a consent management tool that asks for your permission when you first visit the site. Consent is voluntary and can be withdrawn or changed at any time.

Legal basis: Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG (for consent), Art. 6(1)(f) GDPR (for necessary cookies).

Third Parties and Data Sharing

We use the following third-party providers for analytics and marketing purposes:

Zoho CRM
Service provider: Zoho Corporation GmbH, Trinkausstraße 7, 40213 Düsseldorf, Germany.
Contracting entity under applicable German law; the processing is based on a Data Processing Agreement in accordance with Art. 28 GDPR and EU Standard Contractual Clauses (SCCs). The legal jurisdiction is Germany (Düsseldorf).
For more information, please visit: https://www.zoho.com/privacy.html

Google Analytics
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Used for website analytics and performance measurement.
Legal basis: Consent pursuant to Art. 6(1)(a) GDPR.
More information: https://policies.google.com/privacy

Google Ads
Used for conversion tracking and remarketing.
Legal basis: Consent pursuant to Art. 6(1)(a) GDPR.
More information: https://policies.google.com/privacy

Meta Ads (Facebook & Instagram)
Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland
Used for personalized advertising and conversion tracking.
More information: https://www.facebook.com/about/privacy

LinkedIn Ads
Provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Dublin 2, Ireland
Used for conversion tracking and retargeting.
More information: https://www.linkedin.com/legal/privacy-policy

YouTube
Our website includes videos from the YouTube platform. YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in “privacy-enhanced mode,” which, according to YouTube, means no personal data is collected from visitors unless they actively play a video. Once a video is played, however, YouTube may process data about your usage behavior.
If you are logged in to your YouTube account, YouTube can associate your browsing behavior with your personal profile. You can prevent this by logging out of your account before playing videos.
Legal basis: Consent pursuant to Art. 6(1)(a) GDPR.
More information: https://policies.google.com/privacy

Podigee
Provider: Podigee GmbH, Schlesische Straße 20, 10997 Berlin, Germany
Used for embedding and streaming podcast episodes on our website.
Legal basis: Consent pursuant to Art. 6(1)(a) GDPR.
More information: https://www.podigee.com/en/about/privacy

reCAPTCHA
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Used for protecting our website and contact forms from spam and abuse.
Legal basis: Consent pursuant to Art. 6(1)(a) GDPR.
More information: https://policies.google.com/privacy

Data Retention

We retain personal data only as long as necessary for the respective purpose:

  • Contact inquiries: up to 6 months,
  • Contract-related data (e.g., invoices): 6 to 10 years in accordance with commercial and tax law,
  • Job applications: up to 6 months after the recruitment process ends.

Your Rights as a Data Subject

Under the GDPR, you have the following rights:

  • Right to access (Art. 15 GDPR),
  • Right to rectification (Art. 16 GDPR),
  • Right to erasure (Art. 17 GDPR),
  • Right to restriction of processing (Art. 18 GDPR),
  • Right to data portability (Art. 20 GDPR),
  • Right to object to processing (Art. 21 GDPR),
  • Right to withdraw consent at any time (Art. 7(3) GDPR).

To exercise your rights, please contact us using the details provided above.

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe the processing of your personal data violates the GDPR. The authority responsible for us is:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin, Germany
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
Website: https://www.datenschutz-berlin.de