1. Controller
The controller as defined by the DSGVO (Datenschutz-Grundverordnung) is:
Megative DE GmbH (Brand Roomember), Armstrongstraße 11, 04435 Schkeuditz-Glesien, Germany.
E-mail: hello@roomember.com
2. Data Protection Officer
If appointed, you can reach our Data Protection Officer at: hello@roomember.com
3. Purposes and Legal Bases of Processing
We process personal data in particular for the following purposes:
- Mediation of rental and short-term properties sowie established and processing of pre-contractual and contractual relationships — Legal basis: Art. 6 Abs. 1 lit. b DSGVO.
- Request processing via contact form, e-mail, or telephone — Legal basis: Art. 6 Abs. 1 lit. b and lit. f DSGVO.
- Compliance with legal obligations (tax, commercial, and money laundering law) — Legal basis: Art. 6 Abs. 1 lit. c DSGVO in conjunction with § 147 AO (Abgabenordnung), § 257 HGB (Handelsgesetzbuch), GwG (Geldwäschegesetz).
- Operation and security of the website (server logs) — Legal basis: Art. 6 Abs. 1 lit. f DSGVO; legitimate interest in stable, secure provision.
4. What Data We Process
- Master data: Name, address, date of birth (if required for the rental contract).
- Contact data: E-mail, telephone.
- Contract data: Desired property, period, number of persons, budget.
- Credit-relevant information (e.g., SCHUFA self-disclosure, income proofs) exclusively with express consent and only as far as necessary for the specific rental contract.
- Technical data: IP address, browser type, time of access (server logs).
5. Recipients and Third Country Transfer
Your data will only be passed on if this is necessary for the execution of the contract (e.g., to landlords, property managers, authorities), if required by law, or if you have given your consent. Processors (e.g., hosting, e-mail) process data based on a contract according to Art. 28 DSGVO. A transfer to third countries only takes place in compliance with Art. 44 ff. DSGVO.
6. Storage Period
We store personal data only as long as necessary for the stated purposes or as provided for by legal retention periods (in particular § 147 AO, § 257 HGB, usually 6 or 10 years).
7. Your Rights
- Access (Art. 15 DSGVO)
- Rectification (Art. 16 DSGVO)
- Erasure (Art. 17 DSGVO)
- Restriction of processing (Art. 18 DSGVO)
- Data portability (Art. 20 DSGVO)
- Objection to processing based on legitimate interests (Art. 21 DSGVO)
- Withdrawal of granted consent with effect for the future (Art. 7 Abs. 3 DSGVO)
- Complaint to a supervisory authority (Art. 77 DSGVO), e.g., the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
8. Server Logs
When accessing our website, technical data (including IP address, user agent, time, accessed resource) are stored for a maximum of 14 days in order to detect and ward off attacks. Legal basis: Art. 6 Abs. 1 lit. f DSGVO.
9. Cookies and Similar Technologies
We use technically necessary cookies (e.g., to save language selection). Optional cookies are only set with your consent according to § 25 TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz) / Art. 6 Abs. 1 lit. a DSGVO. For details see Cookie Policy.
10. No Automated Decision-Making
Automated decision-making including profiling within the meaning of Art. 22 DSGVO does not take place.