General information

• This data protection information applies to the websitse operated by SMP , which is available on, among other places, the domains https://www.wg-gesucht.de or https://www.onu.com (further referred to as the "Portal").
• SMP may amend this data protection information from time to time in order to accommodate future additions or other revisions to the Portal or individual services. SMP shall inform the user of any amendment to this data protection information by way of a communication to that effect on the Portal. The user shall be entitled at any time to object to the amendment of the data protection provisions and terminate the user relationship with SMP.

Gathering, processing and use of personal data

• SMP gathers the user's personal data in the course of the use of the Portal and of individual applications. Personal data is all information regarding the user's identity such as, for example, name, postal address, email address and telephone number.
• SMP generally processes and uses the personal data gathered in compliance with applicable data protection law provisions for the purpose of making available the Portal and its applications and in order to carry out other services for the user as described below.
• SMP may require the sharing of the user's personal data if the user contacts SMP in writing, by telephone or by email. SMP GmbH & Co. KG may, in the case of such contact, also gather further personal data from the user required for the processing of an error message, request for information or other inquiries on the part of the user. The data gathered is processed by SMP and processed and used for the purpose of dealing with the user's request

Data collection, processing and use when accessing the portal/use of third-party services

• When the user accesses the Portal general information (e. g. IP address, internet browser used, number of visits, average time spent browsing the site, pages accessed) is collected automatically (that is, without any registration or other sharing of personal data). To this end SMP allocates a reference number per Portal visit (Session ID). The information collected is analysed for statistical purposes in order to improve the platform's data protection, its attractiveness, content and functionality.

Google Analytics

SMP uses Google Analytics, a Google Inc. ("Google") web analysis service, in order to gather and evaluate the information collected. Google Analytics uses so-called "cookies", text files that are stored on the user's computer and which help analyse the way the user uses the website. The information generated by the cookie regarding the use of this website (including the user's IP address) is transferred to a Google server in the USA and stored there.

In case of an activated IP anonymization at this platform, the user’s IP address is previously shortened by Google within the Member States of the EU or in other countries which are contracting parties to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be transferred to a Google server in the USA and be shortened there. The personal data are transferred to the USA under the EU-US Privacy Shield based on the adequacy resolution of the European Commission. You can demand the certificate here.

Google will use this information to analyse the use of the website in order to compile reports for SMP on website activity and in order to carry out further services associated with the use of the website and the internet. Where relevant, Google will also transfer this information to third parties to the extent this is legally required or where third parties are commissioned by Google to process the data. In no circumstances will Google connect the user's IP address to other Google data. The user may prevent the installation of cookies through the corresponding installation of browser software; in such a case, it may be that not all functions of the platform can be used in full. By accessing the Portal the user consents to the processing by Google of the data gathered in the manner described and for the purposes listed above. In such cases, there is no further use or transfer of the data. The user can prevent the processing of the cookie based data capture by Google by downloading and installing the browser plugin https://tools.google.com/dlpage/gaoptout?hl=en.

You can find more detailed information about terms of use and data protection here: http://www.google.com/analytics/terms/de.html and http://www.google.com/intl/de/analytics/privacyoverview.html

SMP has added the Google Analytics code "gat._anonymizeIp();" at the platform to guarantee an anonymized recording of IP addresses (so-called IP masking).

Duration of data retention
The data sent by us and linked with cookies, user identification (e.g. user-ID) or advertisement-IDs is automatically deleted after 14 months. The deletion of data whose duration of storage has been accomplished automatically takes place once a month.

Google ReCaptcha

This website uses the function for recognising bots, e.g. for entries in online forms ("ReCaptcha") of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Hubspot

This website uses various tools from the CRM and marketing service provider, Hubspot.
Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Telefon: +353 1 5187500. Privacy Policy https://legal.hubspot.com/privacy-policy

Optimonk

On our website, we use the website optimization tool OptiMonk, a technology provided by OptiMonk International Zrt., located at 4028 Debrecen, Kassai út 129, Hungary, based on Article 6 (1)(a) of the GDPR. This allows us to enhance our website and to display targeted marketing actions and products to users that match their interests. With the users consent, OptiMonk executes a code snippet upon visiting our websites and integrates so-called marketing tags (invisible graphics or code, also referred to as "Web Beacons") into the website. Through the tag, an individual cookie is placed on the respective device, storing various attributes, including a user ID and a session ID, as well as technical information about the browser and operating system or visit duration. These pieces of information are stored anonymously for a period of 365 days, as they do not contain any personal data for us.
To ensure the security of this data processing, we have entered into a data processing agreement with OptiMonk in accordance with Article 28 of the GDPR.
You can revoke your consent to this data processing at any time with effect for the future by configuring your cookie settings accordingly. OptiMonk Privacy Policy

Cookies / Consent Manager

To provide you with a transparent and convenient choice regarding the cookies and similar technologies used on our website, we utilize ConsentManager, a service provided by Jaohawi AB (Håltegelvägen 1b, 72348 Västerås, Sweden, hereinafter “ConsentManager”). ConsentManager enables you to grant permissions for specific categories of cookies or individual cookies and to withdraw these permissions at any time for the future. The use of ConsentManager serves the purpose of obtaining legally required consents for the use of certain technologies. The processing is carried out in accordance with Art. 6 Para. 1 lit. c) GDPR based on our legal obligation to obtain lawful consents for the use of specific technologies.

When using ConsentManager, your IP address is temporarily transmitted to a server of ConsentManager to store and retrieve consent settings. This data processing is based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and similar technologies according to Art. 6 Para. 1 lit. f) GDPR.

The consents stored by ConsentManager are kept for a duration of up to 12 months or until you ask us to delete the data or delete the ConsentManager cookie yourself. The legal basis for storing this information is our legitimate interest according to Art. 6 Para. 1 lit. f) GDPR, to be able to prove consent was given or not given.

For more information on data processing by ConsentManager, please refer to the privacy policy of ConsentManager at: https://www.consentmanager.net/privacy/.

You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on Art. 6 Para. 1 lit. f GDPR. You can adjust your cookie settings and consents at any time using the ConsentManager tool on our website. Adjust cookie settings

Gathering, processing and use of data when using email functions/internal messaging system

• SMP offers various email functions on the Portal. Among these are, in particular, the "Send Message" function (for sending inquiries to advertisers) and the "Email Alerts" function (in order to receive up-to-date information on new Offers).
• When using an email function users are required to submit an email address and, in the case of "Send message", also a name. Such data is processed and used solely in order to carry out the corresponding function (i.e. in particular for the transfer of the message to an advertiser or the sending of Email Alerts). In the case of the alert function the data is stored until the corresponding alert expires.
• In some cities, an internal messaging system is implemented to get in contact. To be able to use it, the user has to be registered. The account stores a title, a first name and surname as well as the user’s email address. In case an Ad is contacted, the email address is stored at SMP for the exchange of messages. Thus, the user can view the messages based on the conversation history in the menu item “Messages”. The user can choose whether he or she would like to receive a notification about new messages to the private email address. If the user has saved a picture in his or her profile, this profile picture is displayed as well as the public name in the conversation history. If the user deletes his or her account, the personal data given in the registration process will be deleted. The conversation history remains unchanged; the personal data is replaced by the information “deleted user”.

Data processing when placing an advertisement/upon signing up

• When placing an advertisement users are simultaneously registered on the Portal. The scope of the data to be gathered is determined by the online form which can be accessed at any time by clicking on the menu item "Create an Ad". In the "Personal information" section SMP requests a title, a first name and surname, post and email address, a user name and password chosen by the user, as well as a date of birth.
• The data collected when placing an advertisement/upon signing up is used to set up a user account and to develop the publication of advertisements. It is always evident from the online form what personal information is publicly visible when an advertisement is published. All fields marked with an asterisk are required.
• In the registration process at the portal, the user is asked for several different consents to the processing of data.
  • The user’s consent that SMP processes and saves his or her personal data for using the portals run by SMP is obligatory to be able to create an account and an ad. The user should confirm the following by clicking: “I agree that SMP GmbH & Co. KG processes and saves my personal data for using the portals run by SMP GmbH & Co. KG.” What does that mean? We never have and never will give your personal data to third parties unauthorized. We treat your data with the utmost privacy. When creating an account at WG-Gesucht.de or Onu.com you have to select a title and to indicate your first name and last name as well as your email address. This information is necessary to create an account, to get in contact with other users and thus, to allow the successful brokerage of housing.
    When creating an ad you additionally have to indicate your date of birth and your address. Your date of birth can later be used for verifying you as the account holder in case of login problems for instance. The object address is displayed in the ad. This has proven its worth since an existing address gives people searching for accommodation a reliable impression and many users limit their search to a restricted geographical area. You can choose from five options how your name is displayed publicly. Entering a telephone number is possible, it is voluntary though.
  • If the user wishes to receive individual tips and hints for his or her search, he or she can give his or her consent. If the user does not agree, he or she will still be able to use the service of WG-Gesucht.de. The user can edit the settings via “My Profile” at any time. If the user wishes to receive the said information, we will ask him to confirm this by clicking: “I agree that the customer care sends individual tips and hints for my search to me.”
    What does that mean? It is our aim to help you find a new home or a new roommate or your next tenant quickly. Therefore, we would love to send tips to you by email occasionally. This does not refer to an automated newsletter, but to hints specifically designed for your search.
  • If the user wishes to receive general information about the service of WG-Gesucht.de, he or she can give his or her consent. If the user does not agree, he or she will still be able to use the service of WG-Gesucht.de. The user can edit the settings via “My Profile” at any time. If the user wishes to receive the said information, we will ask him to confirm this by clicking: “I agree that the customer care sends general information about the service of WG-Gesucht.de to me.”
    What does that mean? The satisfaction of our users is very important to us. Therefore, we would be pleased if we could occasionally send surveys on how to improve our service or newsletters regarding new features to you. We do not send any advertising mails by third parties.
• In the case of a registered user accessing the Portal (in particular where a user accesses advertisements he has placed) SMP asks for the user's email address or user name and password in order to identify the latter as a registered user.

Data processing when placing an advertisement as a company/using chargeable services

Stripe Payments Europe Ltd.

For the processing of payments via credit card or SEPA direct debit mandate, we use the services of Stripe Payments Europe, Ltd. If you choose a payment method offered via the payment service provider "Stripe", the payment processing is carried out via Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provided during the ordering process, together with information about your order (name, address, account holder, IBAN or credit card number, product, invoice amount, currency and transaction number) in accordance with Art. 6 Para. 1 lit. b DSGVO. Your data will only be passed on for the purpose of processing payments with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. You can find more information on the data protection of "Stripe" at https://stripe.com/privacy.

Google Pay

For the processing of payments, we offer the use of Google Pay among others, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter “Google”). When you choose to pay via Google Pay, the information required for the transaction is transmitted to Google. This serves the purpose of contract processing in accordance with Art. 6 Para. 1 lit. b) GDPR. Google Pay collects, stores, and processes information about your payment transaction as well as your interactions related to the payment process. Google processes your data in accordance with Googles privacy policies, which can be viewed at https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en. For further information on the processing of your data by Google Pay, your rights, and settings to protect your privacy, please refer to Googles privacy notice.

Apple Pay

As a payment method, we also offer Apple Pay in our online shop, a service of Apple Inc. (One Apple Park Way, Cupertino, CA 95014, USA, hereinafter “Apple”). When selecting Apple Pay for payment processing, the information necessary for completing the transaction is transmitted to Apple. The transmission of your data to Apple is based on Art. 6 Para. 1 lit. b) GDPR and serves the purpose of contract processing. Apple Pay stores and processes information about your payment transaction as well as about your interactions related to the payment process. The processing of your personal data by Apple is carried out in accordance with Apples privacy policies, which can be viewed at https://www.apple.com/legal/privacy/data/en/apple-pay/. For more information on privacy when using Apple Pay, your rights, and options to protect your privacy, please see Apples privacy policy.

easybill GmbH

Nach Abwicklung der Buchung erhalten Sie eine Rechnung per E-Mail. Zur Rechnungserstellung nutzen wir die Online Rechnungssoftware von easybill (easybill GmbH, Düsselstr. 21, 41564 Kaarst). Name, Anschrift sowie gegebenenfalls weitere personenbezogene Daten werden gemäß Art. 6 Abs. 1 lit. b DSGVO ausschließlich zur Rechnungserstellung an easybill weitergegeben. Die Weitergabe Ihrer Daten erfolgt hierbei nur, soweit dies für die Rechnungserstellung tatsächlich erforderlich ist. Einzelheiten zum Datenschutz von easybill und die Datenschutzerklärung von easybill sind unter https://www.easybill.de/privacy einsehbar.

Processing and deletion of data

• The user may at any time view, update or amend the registration data stored about him and his advertisement data via his user profile under the menu item "My advertisements" on the Portal upon entering his user name and his password.
• The user may delete his user profile via the menu item ”My Profile - FAQ” or “My Profile - Delete Account”. In this case the personal data collected and processed by SMP GmbH & Co. KG will be deleted in line with the following provisions.
• The deletion relates exclusively to the user's personal data gathered using the online form for placement of an advertisement/registration in the "Personal information" section, to the title of the Ad quoted by the user and to the text of the advertisement as well as, where relevant, to any pictures uploaded. Other advertisement data may be stored beyond the publication period and used as anonymized analyses by SMP without reference to the user.
• When a user profile is deleted certain applications may potentially not be available or fully available for use.
• SMP reserves the right to delete user profiles that have not been used for a period of more than a year (in particular via access to the user profile) within the said length of time. The user will be notified in advance of the planned deletion of his user profile using the email address provided when an advertisement was placed/upon registration.
• To the extent that a deletion breaches statutory duties of safekeeping or duties of safekeeping contained in the Articles of Association the data will be blocked.

Sharing of data with third parties

• Subject to compliance with the applicable data protection provisions SMP shall be entitled to make available the user's data to third parties with whom SMP cooperates in making the Portal and individual applications available or in carrying out other services for the user. The sharing of data shall be limited to the purpose of cooperation and the third parties cooperating with SMP shall only be entitled to apply the data to the extent that this is necessary for the aforementioned purposes.
• SMP is furthermore entitled to have the data processing referred to in Figure 2 carried out wholly or in part by third parties. In this case the provisions in Figure 2 shall correspondingly apply also to the third parties cooperating with SMP.
• Furthermore, SMP may share personal data with third parties
  • if the user has expressly consented to the sharing of data,
  • if there is in place an enforceable or final and absolute legal or official order for the disclosure to and/or sharing of data with third parties or if, on the basis of a statutory obligation, SMP is obliged to disclose and/or share the data with third parties even without such an order,
  • if the disclosure and/or sharing of data is necessary in order to prevent an abuse of the Portal or individual applications - in particular a breach of the terms of use - in a way that is permitted by law.

Withdrawal of consents / user rights

• To the extent the user has approved a particular kind of data application (in particular the sharing of data with third parties), he may at any time withdraw such approval with effect for the future. The withdrawal may be sent in writing to SMP GmbH & Co. KG, Auf dem Haigst 34, 70597 Stuttgart or by email to datenschutz[at] wg-gesucht[dot]de (datenschutz@wg-gesucht.de).
• The user can request information about his or her personal data processed by SMP. In particular, the user can request information on the following: the processing purposes, the category of the personal data, the categories of recipients to whom his or her data are and were disclosed, the planned duration of data retention, the existence of a right to correcting, deleting, limiting the processing or contradicting, the existence of a right of appeal, the data origin and the existence of an automated decision making including profiling and significant information about their details where appropriate.
• The user can immediately demand the correction of incorrect data or the completion of personal data saved by SMP.
• The user can demand the deletion of his or her personal data saved by SMP given that the processing is not necessary for the exercise of freedom of expression and information, for the compliance with a legal obligation, for reasons of public interest or for enforcement, exercise or defense of legal claims.
• The user can demand the limitation of the processing of personal data in case he or she challenges the correctness of the data, the processing is illegal but he or she rejects a deletion and SMP does not need the data anymore, but the user needs it for the enforcement, exercise or defense of legal claims or the user appeals against the processing.
• The user can receive his or her personal data provided by SMP in a structured, most common and machine¬-readable format or demand the transfer to a different person responsible.
• The user can revoke his or her once given consent towards SMP at any time (see section 8.1). As a consequence, SMP will not continue with the processing of data which was based on this consent.
• The user can file a complaint at a supervisory authority. Usually, the user can contact the supervisory authority of his or her place of usual residence or workplace or the head office of SMP.

Data security

SMP shall take appropriate precautions to protect the user's personal data against loss, damage, falsification, manipulation and unauthorised access. The applicable data protection law provisions will of course be observed in the process. During the website visit, SMP uses the common SSL-method (Secure Socket Layer) in combination with the highest encryption level that is supported by the user’s browser. Usually, this means a 256-bit encryption. In case the user’s browser does not support a 256-bit encryption, SMP uses a 128-bit v3 technology instead. If an individual page of the website is transferred encoded, is visualized by the closed representation of the key or lock symbol on the lower status bar of the browser. Moreover, SMP uses appropriate technical and organizational safety precautions to protect the users’ data against accidental or deliberate manipulation, partly or total loss, destruction and unauthorised access of any third person. The security precautions by SMP are permanently improved according to the latest technical developments.

Using mobile applications

In addition to the standard version, the service provided by SMP is also available for mobile devices. All integrated processes of data processing, i.e. gathering, saving and processing of data take place in the processing processes and processing systems as described in the data protection information above.

Queries, contacts