Data Protection Statement 1. Name and contact details of the controller and the company’s data protection officer This data protection information shall be applicable to the data processing by (controller): [phase eins]. Hossbach Lehmhaus GbR Cuxhavener Str. 12-13 10555 Berlin E-mail: hossbach@phase1.de Telefon: 030/ 3159310 Telefax: 030/ 3121000 The company’s data protection officer can be contacted at the above address or at datenschutz@phase1.de. 2. Collection and storage of personal data and the nature and purpose of their processing a) When you visit the website When you visit our website www.phase1.de or one of our project-related websites with its own domain, the browser used on your end device will automatically send information to the server of our website. This information will be temporarily stored in a so-called log file. The following information will be collected without your involvement and stored until automated erasure: The IP address of the requesting computer, The date and time of the request The name and URL of the retrieved file, The website, from which our website is accessed (referrer URL), The browser used and, as the case may be, the operating system of your computer as well as the name of your access provider. The data mentioned above will be processed by us for the following purposes: Ensuring the trouble-free connection of the website, Ensuring a comfortable use of our website, Evaluating system security and stability, and for other administrative purposes. The legal basis for the processing of your data is provided by point (f) of sentence 1 of Article 6 (1) GDPR [German Data Protection Regulation]. Our legitimate interest results from the data collection purposes listed above. We will in no case use the collected data for the purpose of drawing conclusions regarding your person. All stored data will be erased no later than 7 days after their collection. Furthermore, we use cookies when you visit our website. You will find more detailed explanations in section 4 of this data protection statement. b) When you register independently of a project or when you register as an applicant/a tenderer or a participant in non-open competitions and negotiation procedures You have the opportunity to register on our platform and set up a password-protected profile in our data pool where we store all the data transmitted by you. This is necessary to enable you to participate as an applicant or a tenderer via our platform in a pre-qualification procedure for a (non-open) competition or a negotiation procedure. You may also set up a profile and register independently of a project. The data will also be stored after completion of the specific project, and the stored profile can be used for subsequent negotiation or competition procedures. Pursuant to point (b) of sentence 1 of Article 6 (1) GDPR, the processing of your data is necessary for the aforementioned purposes for the performance of the contract and pre-contractual measures. If you wish to set up a password-protected personal profile with us, we will collect the following information from you: Office data (e.g. office name, number of employees, address, telephone number, e-mail address); Details of the person responsible for the application or, in the case of a legal person, the legal representative (e.g. last name, first name, date of birth, year of graduation, professional qualification, date and type of professional qualification. In addition, you have to enter a password of your choice to set up a personal profile. Together with your user ID, this will allow you to access your profile. You can view and change your personal data in your personal profile at any time. For faster clarification of any queries, you can also voluntarily provide your mobile phone or fax number. In addition, you can voluntarily provide the following information: Information on references / projects (e.g. location of the project, year of completion, client, contract awarding body, construction project, competition, responsibility, general planner, fee zone, fee rate), Information on awards and publications; Overview of any completed competition procedures coordinated by us, in which you have participated or for which you have applied or registered for participation. Your voluntary data will be processed on the basis of our legitimate interests pursuant to point (f) of sentence 1 of Article 6 (1) GDPR for the purposes mentioned above. After your profile has been deleted, your data will be automatically erased and not be available for any further use, unless we will be obliged to store such data for a longer period of time pursuant to point (c) of sentence 1 of Article 6 (1) due to tax and commercial law obligations regarding storage and documentation (from HGB [German Commercial Code], StGB [German Criminal Code] or AO [German Fiscal Code]) or you have consented to further retention pursuant to point (a) of sentence 1 of Article 6 (1) GDPR. c) Registration for open competitions As a person eligible for participation, you will also have the opportunity to register on our platform for the purpose of participating in open competitions. The following information must be processed as part of the registration procedure: Name of the company, First and last name, Place, Country, and A valid e-mail address After registration, we will send you by e-mail the access password, which will give you access to the competition brief documents. Pursuant to point (b) of sentence 1 of Article 6 (1) GDPR, the processing of your data is necessary for the aforementioned purposes for the performance of the contract and pre-contractual measures. The data will also be stored after completion of the specific project, and the stored profile can be used for subsequent open competition procedures. After your registration profile has been deleted, your data will be automatically erased and not available for any further use, unless we will be obliged to store such data for a longer period of time pursuant to point (c) of sentence 1 of Article 6 (1) due to tax and commercial law obligations regarding storage and documentation (from HGB [German Commercial Code], StGB [German Criminal Code] or AO [German Fiscal Code]) or you have consented to further retention pursuant to point (a) of sentence 1 of Article 6 (1) GDPR. d) When you apply for a vacant position In the "Jobs" section you have the opportunity to apply for job openings or to send us a speculative job application. Applications can be sent to the following e-mail address: office@phase1.de We need your application documents in order to determine who submitted the application and to be able to answer and process them. The data will be processed on your request and only to the extent that it will be necessary for the purposes of answering the application and establishing the employment relationship pursuant to Article 88 (1) in conjunction with § 26 (1) BDSG [Federal Data Protection Act], in the context of pre-contractual measures pursuant to point (b) of sentence 1 of Article 6 (1) GDPR or for the purposes of protecting our legitimate interests pursuant to point (f) of sentence 1 of Article 6 (1) GDPR. Applications that have not been considered will be deleted after 3 months at the latest unless you have consented to further retention pursuant to point (a) of sentence 1 of Article 6 (1) GDPR. e) When you subscribe to our newsletter If you have expressly given your consent pursuant to point (a) of sentence 1 of Article 6 (1) GDPR, we will use your e-mail address to send you our personalized newsletter on a regular basis. To receive the newsletter, you are required to provide your first and last name, the company name, an e-mail address, the city, country and your preferred language. You can unsubscribe at any time, e.g. via a link at the end of each newsletter. Alternatively, you can also send your unsubscription request by e-mail to datenpool@phase1.de at any time. The e-mail address and the identifying data will be stored until you have unsubscribed from the newsletter. f) When you use our contact form If you have any questions, you can contact us via a form provided on the website. You may voluntarily provide the following information so that we will know who sent the request and will be able to answer it: Title First and last name Company E-mail Address Telephone and fax number Internet address Short description of the sender’s company The data will be processed for the purpose of establishing contact with us and processing your request on the basis of our legitimate interests pursuant to point (f) of sentence 1 of Article 6 (1) GDPR. The personal data collected by us for the use of the contact form will be erased after the request made by you has been dealt with. 3. Transfer of data The collected data will in no case be sold or - except in cases in which you have expressly given us your consent - passed on to third parties for any other reasons. 4. Cookies We use cookies on our website. Cookies are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and they do not contain any viruses, Trojans or other malware. The cookie is used to store information, which is in each case a result of the specifically used end device. However, this does not mean that we will gain immediate knowledge of your identity. On the one hand, the use of cookies is meant to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website, that you have already logged into your user account or that you are using them to display your shopping cart. These session cookies will be automatically deleted after you have left our website. In addition, we also use temporary cookies to optimize ease of use with such cookies being stored on your end device for a specified period of time. If you visit our website again to use our services, it will be automatically recognized that you have already been here and what inputs and settings you have made so that you do not have to enter them again. On the other hand, we use cookies to track the use of our website for statistical purposes and to evaluate it for the optimization of our offer for you (see point 5). These cookies enable us to automatically recognize that you have already visited our website when you visit it again. These cookies are automatically deleted after a respectively defined period of time. The data processed by cookies are necessary for the purposes mentioned herein to safeguard our legitimate interests and those of third parties pursuant point (f) of sentence 1 of Article 6 (1) GDPR. Most of the browsers automatically accept cookies. However, you can configure your browser so that no cookies will be stored on your computer or a message will always appear before a new cookie is created. However, if you disable cookies completely, you may not be able to use all the features of our website. 5. Rights of the data subjects You have the right: to request information on the personal data processed by us pursuant to Article 15 GDPR. In particular, you may request information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of the right of rectification, erasure, restriction of processing or objection, the existence of the right to lodge a complaint, the origin of your data if such data has not been collected by us, and the existence of an automated decision-making process including profiling and, if applicable, substantial information on the details thereof; to request the immediate rectification of inaccurate or incomplete personal data relating to you and stored by us pursuant to Article 16 GDPR; to demand the erasure of your personal data stored by us pursuant to Article 17 GDPR, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for the performance of a task carried out in the public interest, or for the establishment, exercise or defense of legal claims; to request the restriction of the processing of your personal data pursuant to Article 18 GDPR to the extent that the accuracy of the data is contested by you, the processing of the data is unlawful but you oppose the erasure thereof and we no longer need the data, however, they are required by you for the establishment, exercise or defense of legal claims, or you have objected to the processing pursuant to Article 21 GDPR; to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format or to request transfer to another controller pursuant to Article 20 GDPR; to withdraw your consent given to us at any time pursuant to Article 7 (3) GDPR. The consequence is that we will no longer be allowed to continue the data processing based on this consent in the future; and to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR. As a rule, you can lodge such complaint with the supervisory authority of your habitual residence, place of work or of our headquarters. 6. Right to object If your personal data are processed on the basis of legitimate interests pursuant to point (f) of sentence 1 of Article 6 (1) GDPR, you are, pursuant to Article 21 GDPR, entitled to object to the processing of your personal data to the extent that there are reasons to do so and such reasons result from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which will be implemented by us without specifying a particular situation. If you wish to exercise your right of withdrawal or objection, it is sufficient to send an e-mail to datenpool@phase1.de 7. Data security During your visit of our website, we use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser. We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures will be continuously improved in line with the technological developments. 8. Uptodateness and amendment of this data protection statement DThis data protection statement as per September 2018 is currently valid. Due to the further development of our website and any offers on our website or due to changes of any legal or official requirements, it may be necessary to amend this data protection statement. The updated data protection statement can be retrieved at any time a Data Protection Statement and printed by you.