Privacy Policy

As of June 2026

Privacy Policy

We are very pleased that you are interested in our company. Data protection is a top priority for the management of ParkHere GmbH. In this Privacy Policy, we explain how we handle the personal data you provide on our website. You will learn what information we collect from you, why we collect it, how we use it, and how long we retain it.

1. Responsibility and Contact Information 

The entity responsible for the data processing that takes place on our website is:

ParkHere GmbH
Gollierstraße 70
80339 Munich
Tel.: +4989125030301
Email: info@park-here.eu

The data protection officer for the data controller is:

Dr. Michael Funke

JBB Data Consult GmbH

95 Friedrichstr., 10117 Berlin
Email: dsb@park-here.eu

2. Data Processing on Our Website

When you visit our website and use its features, we process personal data. Unless otherwise stated, you are not required to provide us with personal data. However, in that case, we generally cannot provide you with access to our website or the services offered on it. 

In the following sections, we explain what data we process, for what purposes, for how long, and on what legal basis. You will also learn to whom we disclose your data. At the end of this Privacy Policy, you will also find information on retention periods, general recipients, and automated decision-making.

2.1 General Use of the Website

Purposes: When you visit our website, we process certain data to enable you to use the website and its features.

Categories of Data: The data processed in connection with your use of the website typically includes your IP address, which is necessary to deliver the content of our online services to your device, as well as any information you enter on our website (e.g., language selection, form entries, search queries, or similar).

Recipient:

  • HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA

Transfers to Third Countries: Data may be transferred to third countries, in particular the United States. HubSpot Inc. is certified under the Data Privacy Framework, which currently ensures an adequate level of protection during processing. Standard contractual clauses have also been entered into.           

Privacy Policy: HubSpot Privacy Policy

Legal basis: The legitimate interest in pursuing the stated purposes (Art. 6(1), first sentence, subparagraph (f) of the GDPR).

Retention Period: We do not permanently store any personal data for the purposes specified.

2.2 Collection of Access Data and Log Files

Purposes: Server log files are stored during your visit. These server log files may be used, on the one hand, for security purposes—for example, to prevent server overload—and, on the other hand, to ensure server capacity and stability.

Categories of data: the address and name of the web pages and files accessed, the date and time of access, the amount of data transferred, confirmation of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), and, as a rule, IP addresses and the requesting provider.

Recipient:

  • HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA

Transfers to Third Countries: Data may be transferred to third countries, in particular the United States. HubSpot Inc. is certified under the Data Privacy Framework, which currently ensures an adequate level of protection during processing. Standard contractual clauses have also been entered into.           

Privacy Policy: HubSpot Privacy Policy

Legal basis: The legitimate interest in pursuing the stated purposes (Art. 6(1), first sentence, subparagraph (f) of the GDPR).

Retention period: Server log files are stored for [number] days and then deleted.

2.3 Getting in Touch

Purposes: When you contact us (via the contact form, email, or phone), the information provided by the person making the inquiry will be processed to the extent necessary to respond to the inquiry and take any requested actions.

Categories of data: Master data (e.g., names, addresses), contact information (e.g., email, phone number), content data (e.g., entries in online forms), IP address.

Recipient:

  • HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA

Transfers to Third Countries: Data may be transferred to third countries, in particular the United States. HubSpot Inc. is certified under the Data Privacy Framework, which currently ensures an adequate level of protection during processing. Standard contractual clauses have also been entered into.           

Privacy Policy: HubSpot Privacy Policy

Legal basis: Responding to contact inquiries in the context of contractual or pre-contractual relationships is carried out to fulfill our (pre-)contractual obligations (Art. 6(1), first sentence, lit. b GDPR). In all other cases, this is based on our legitimate interest (Art. 6(1), first sentence, lit. f GDPR) in effectively responding to the inquiries. 

Retention Period: The personal data you provide to us via the contact form will be processed until your request has been appropriately handled and fulfilled.

2.4 ParkHere Support Bot

Purposes: If you need assistance, you can also contact us with questions via our ParkHere Support Bot. The information you provide will be processed to the extent necessary to respond to your inquiry. To ensure quality assurance, the chat is monitored and recorded by our service provider. 

Categories of data: Identifying information (e.g., names, addresses), content data (e.g., chat messages), IP address.

Recipient:

  • HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA

Transfers to Third Countries: Data may be transferred to third countries, in particular the United States. HubSpot Inc. is certified under the Data Privacy Framework, which currently ensures an adequate level of protection during processing. Standard contractual clauses have also been entered into.           

Privacy Policy: HubSpot Privacy Policy

  • …

Legal basis: Responding to inquiries in the context of contractual or pre-contractual relationships is carried out to fulfill our (pre-)contractual obligations (Art. 6(1), first sentence, lit. b GDPR). In all other cases, this is based on our legitimate interest (Art. 6(1), first sentence, lit. f GDPR) in effectively responding to inquiries. 

Retention Period: The personal data you provide to us via the support bot will be processed until your request has been appropriately handled and resolved. The chat logs will be stored for [number].

2.5 Newsletter

Purpose: You have the option to subscribe to our newsletter, through which we regularly inform you about our company's offers.  

To subscribe to our newsletter, we use the so-called double opt-in procedure, which means we will not send you our newsletter until you confirm—by clicking a link in a message—that you are the owner of the specified communication method. If you confirm the address, we will store the address or number, the time of registration, and, if applicable, the IP address used for registration for verification purposes until you unsubscribe from the newsletter. 

Our newsletter contains what are known as tracking pixels. A tracking pixel is a tiny graphic embedded in emails sent in HTML format to enable log file recording and analysis. This allows for a statistical evaluation of the success or failure of online marketing campaigns. Using the embedded web beacon, ParkHere GmbH can determine whether and when an email was opened by a data subject and which links contained in the email were clicked by the data subject.

Categories of data: Consent data (name, email address, time, IP address), usage data (messages opened, links clicked), personalization data. 

Recipient:

  • HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA

Transfers to Third Countries: Data may be transferred to third countries, in particular the United States. HubSpot Inc. is certified under the Data Privacy Framework, which currently ensures an adequate level of protection during processing. Standard contractual clauses have also been entered into.           

Privacy Policy: HubSpot Privacy Policy

Legal Basis: We process your data based on your consent in accordance with Article 6(1)(a) of the GDPR. 

Retention Period: The data will be processed until you withdraw your consent.

2.6 Applications

Purposes: When you apply for a position with us, we process personal data to the extent necessary to make a decision regarding the establishment of an employment relationship.

Categories of data: Personal information (name, date of birth), contact information (address, email address), content data (such as resume, cover letter, transcripts), and communication data.

Recipient:

  • allaboutHRLaw, Gartenstraße 12, 85609 Aschheim

Legal basis: Performance of a contract and pre-contractual inquiries (Art. 6(1), first sentence, subparagraph (b) of the GDPR) or legitimate interest in effectively responding to job applications (Art. 6(1), first sentence, subparagraph (f) of the GDPR).

Retention Period: If your application is successful, we will store your data for the purpose of carrying out the employment relationship (Art. 6(1)(b) GDPR in conjunction with § 26 BDSG).
If your application is rejected or withdrawn, we reserve the right to retain the data you submitted for 6 months from the end of the application process (rejection or withdrawal of the application) based on our legitimate interests (Art. 6(1)(f) GDPR). Thereafter, the data will be deleted and the physical application documents will be destroyed. The retention serves, in particular, as evidence in the event of a legal dispute. If it becomes apparent that the data will be required after the 6-month period has expired (e.g., due to an impending or pending legal dispute), the data will not be deleted until the purpose for its continued retention no longer applies.

2.7 Consent Management

Purposes: To provide our website and its features, we may store information on your device or access features stored on it. To the extent that this involves features that are not strictly necessary, we will obtain your consent. We also obtain your consent when we use optional third-party content (e.g., embedded videos or other content from external sources). Your consents are stored on your device to implement your desired settings and, if necessary, to provide proof of the consents obtained.

Categories of data: the consents you have provided, pseudonymous identifiers, and the settings you have configured.

Recipient:  

  • Usercentrics GmbH Sendlinger Straße 7 80331 Munich, Germany

Legal basis: The legitimate interest in pursuing the stated purposes (Art. 6(1), first sentence, subparagraph (f) of the GDPR). 

Retention period: We do not store any data in this context.

2.8 Web Analytics, Monitoring, and Optimization

Purposes: Web analytics is used to analyze visitors to our online platform and may include information—in pseudonymous form—about visitors’ behavior, interests, or demographic characteristics, such as gender. This allows us, for example, to identify the times when our online platform or its features and content are used most frequently. In addition, it enables us to identify areas that require optimization. In addition to web analytics, we may also use testing methods to, for example, test and optimize different versions of our online platform or its components.

Categories of data: In particular, usage data (e.g., content accessed, features used, and technical details; access times; IP address); meta/communication data (e.g., device information); and system data (e.g., error messages). 

Service providers used:

  • Microsoft Clarity

Provider: Microsoft Deutschland GmbH, Walter-Gropius-Straße 5, 80807 Munich

Transfers to Third Countries: Data may be transferred to third countries, in particular the United States. Microsoft is certified under the Data Privacy Framework, which currently ensures an adequate level of protection during processing. Standard contractual clauses have also been entered into.                         

Privacy Policy: https://policies.google.com/privacy?hl=de.  

  • Google Website Optimizer, Google Tag Manager, Google Analytics, and Google reCAPTCHA

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. 

Transfers to Third Countries: Data may be transferred to third countries, in particular the United States. Google LLC is certified under the Data Privacy Framework, which currently ensures an adequate level of protection during processing. Standard contractual clauses have also been entered into.                         

Privacy Policy: https://policies.google.com/privacy?hl=de.  

Legal basis: Consent (Art. 6(1), first sentence, subparagraph (a) of the GDPR) and legitimate interests (Art. 6(1), first sentence, subparagraph (f) of the GDPR). 

Retention period: 

Withdrawal: You may withdraw your consent at any time via our consent management platform.

2.9 Plugins and Tools 

Purposes: We use various types of embedded third-party content to make our website more user-friendly.

This website embeds videos from YouTube, so when you visit the corresponding page, a connection is established with YouTube’s servers. In the process, the YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account. We use YouTube in enhanced privacy mode. According to YouTube, videos played in enhanced privacy mode are not used to personalize the YouTube viewing experience. Ads displayed in enhanced privacy mode are also not personalized. No cookies are set in enhanced privacy mode. Instead, however, so-called local storage elements are stored in the user’s browser; these contain personal data similar to cookies and can be used for recognition purposes. Details about enhanced privacy mode can be found here:https://support.google.com/youtube/answer/171780.

Recipient:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. 

Transfers to Third Countries: Personal data is processed in the United States, which is a third country outside the EU. Google LLC is certified under the Data Privacy Framework, ensuring an adequate level of protection during processing.

Privacy Policy:https://policies.google.com/privacy?hl=de

Legal Basis: Processing is based on your consent (Art. 6(1), first sentence, subparagraph (a) of the GDPR) or our legitimate interest (Art. 6(1), first sentence, subparagraph (f) of the GDPR). Our legitimate interest is to provide users with an interactive and engaging website.

Retention Period: We do not store any personal data.

3. Social Media Presence

We have profiles on social media platforms. Our social media accounts complement our website and offer you the opportunity to interact with us. As soon as you access our social media profiles on these platforms, the terms and conditions and data processing policies of the respective operators apply. The data collected about you when you use these services is processed by the social media platforms and may also be transferred to countries outside the European Union where there is no adequate level of protection for the processing of personal data. We generally have no influence over data processing on these social media platforms, as we are users of the platform just like you. We use the following social media platforms:

3.1 Facebook and Instagram

Our website can be accessed at: [Link] and [Link]

The network is operated by: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. 

Network Privacy Policy: https://www.facebook.com/about/privacy and https://privacycenter.instagram.com/

3.2 LinkedIn

Our website can be accessed at: https://de.linkedin.com/company/parkhere 

The network is operated by: LinkedIn Ireland Unlimited Company, Wilton Place,
Dublin 2, Ireland.

Privacy Policy for the network: https://www.facebook.com/about/privacy and https://de.linkedin.com/legal/privacy-policy?trk=content_footer-privacy-policy.

3.3 Xing

Our website can be accessed at: https://www.xing.com/pages/parkhere 

The network is operated by: New Work SE, Baumwall 7, 20459 Hamburg

Network Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung?nwt_nav=footer

3.4 X

Our website can be accessed at: https://x.com/ParkHere_muc 

The network is operated by: X Internet Unlimited Company, One Cumberland Place
, Fenian Street, Dublin 2, D02 AX07, Ireland

Network Privacy Policy: https://x.com/de/privacy

3.5 Joint Liability

Purposes: We process personal data as the sole data controller when you send us inquiries via our social media profiles. We process this data to respond to your inquiries. In addition, we are jointly responsible with the following networks for the following processing activities (Art. 26 GDPR). When you visit our profile on LinkedIn, the network collects aggregated statistics (“Insights data” or “Analytics data”) derived from certain events logged by its servers when you interact with our profiles and the associated content. We receive these aggregated and anonymous statistics from the network regarding the use of our profile. We are generally unable to associate the data with specific users. To a certain extent, we can specify the criteria according to which the network generates these statistics for us. We use these statistics to make our profiles more interesting and informative for you.  

For more information about this data processing on Facebook and Instagram, please see the Joint Controller Agreement at: https://www.facebook.com/legal/terms/information_about_page_insights_data

For more information about this data processing on LinkedIn, please see the Joint Controller Agreement at: https://legal.linkedin.com/pages-joint-controller-addendum. 

Incidentally, the network is solely responsible for processing your data. 

Legal basis: Data processing is carried out on the basis of our legitimate interest (Art. 6(1), first sentence, subparagraph (f) of the GDPR). This interest lies in the respective purpose.  

Retention Period: We do not store any personal data ourselves within the framework of joint responsibility. With regard to contact requests from outside the network, the information provided above regarding contact requests applies accordingly.

4. General Information About Recipients

When we process your data, it may be necessary to transfer or disclose your data to other recipients. In the sections above regarding processing, we identify the specific recipients to the extent possible. If recipients are located in a country outside the EU, we indicate this separately under the individual points listed above. Unless we expressly refer to an adequacy decision, no such decision exists for the respective recipient country. In such cases, we will agree to appropriate safeguards in the form of standard contractual clauses to ensure an adequate level of data protection (unless other appropriate safeguards, such as binding corporate rules, are in place). You can access the current versions of the standard contractual clauses at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj.

In addition to these specific recipients, however, data may also be transferred to other categories of recipients. These may include internal recipients—that is, individuals within our company—as well as external recipients. Possible recipients may include, in particular: 

  • Our employees who are responsible for processing and storing the data and whose employment relationship with us is governed by a confidentiality agreement. 

  • Service providers who act on our behalf as data processors bound by our instructions. These are primarily technical service providers whose services we use when we are unable to provide certain services ourselves or when it would not be practical for us to do so.

  • Third-party providers who help us provide our services in accordance with our Terms and Conditions. For example: payment service providers or marketing service providers.  

  • With government agencies to comply with our legal and reporting obligations.

5. General Information on Retention Periods

As a general rule, we process your personal data for the retention period described above in each case. However, data is often processed not just for one purpose but for several, so it is possible that we may continue to process your data for another purpose even after the retention period has expired. In such cases, the retention period specified for that purpose applies. As soon as the final retention period has expired, we will delete your data immediately.

6. Automated Decision-Making and the Obligation to Provide Data

We do not use automated decision-making that has legal effects on you or similarly significantly affects you.

7. What rights do you have regarding the personal data you provide to us?

You have the rights listed below, provided that the legal requirements are met in each case. To exercise these rights, you may contact us at the address you have on file. 

  • Art. 15 of the GDPR – Right of Access of the Data Subject: 

You have the right to request confirmation from us as to whether personal data concerning you is being processed, and if so, what data is being processed and the specific circumstances of the data processing. 

  • Art. 16 of the GDPR – Right to Rectification: 

You have the right to request that we correct any inaccurate personal data concerning you without delay. Taking into account the purposes of the processing, you also have the right to request that incomplete personal data be completed—including by means of a supplementary statement. 

  • Art. 17 of the GDPR – Right to Erasure: 

You have the right to request that we delete your personal data without delay. 

  • Art. 18 of the GDPR – Right to Restriction of Processing: 

You have the right to request that we restrict the processing of your personal data. 

  • Art. 20 of the GDPR – Right to Data Portability: 

If the processing is based on consent or is necessary for the performance of a contract, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and to transmit this data to another controller without hindrance from us, or to have the data transmitted directly to the other controller, to the extent that this is technically feasible. 

  • Art. 77 of the GDPR in conjunction with § 19 of the BDSG – Right to lodge a complaint with a supervisory authority: 

You have the right to lodge a complaint at any time with a supervisory authority—in particular, in the Member State where you reside, where you work, or where the alleged violation occurred—if you believe that the processing of your personal data violates applicable law.

8. In particular, the right to object and the withdrawal of consent

  • Art. 21 GDPR – Right to Object: 

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is necessary on the basis of a legitimate interest on our part, or to fulfill a task carried out in the public interest, or that is carried out in the exercise of official authority. 

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims. 

To the extent that we process your personal data for direct marketing purposes, you have the right to object to such processing at any time. If you object to the processing for direct marketing purposes, we will no longer process your personal data for those purposes. 

You may file an objection at any time, effective for the future, by contacting us at any of the addresses you have on file. 

  • Withdrawal of Consent: 

You may revoke your consent at any time, effective for the future, by contacting us at any of the contact addresses you have on file.   

9. Obligation to Provide Data

You are under no contractual or legal obligation to provide us with personal data. However, without the data you provide, we will not be able to offer you our services.

10. Cookie Policy

10.1 Why do we use cookies (and similar technologies)?

For the purposes mentioned above, we also store information on your device and access information stored on your device. We do this using cookies or similar technologies, such as local storage (hereinafter collectively referred to as “cookies” for simplicity). 

Some of these cookies are strictly necessary for us to provide our services to you (Section 25(2)(2) TDDDG). We only use cookies that are not strictly necessary for our services with your express consent (Section 25(1) TDDDG), which you can give or withdraw at any time via our Cookie Policy and may revoke with future effect.

You can also view which specific cookies are stored and how long they remain on your device in the Privacy Preference Center. There, you will also find a breakdown of which cookies are used for the processing purposes listed above and which providers are involved.

10.2 What types of cookies do we use?

We use persistent and temporary cookies (“session cookies”). Session cookies remain on your device only until you close your browser session. Persistent cookies remain stored on your device until they expire or are deleted.

10.3 Strictly Necessary Cookies 

These cookies enable basic functions and are absolutely necessary for the website to work properly.

10.4 Statistics Cookies

If you consent to the “Statistics” category, cookies will be set and personal data will be processed to analyze your use of our services, improve our service for you, prevent bugs, and test new features. In this process, pseudonymized profiles of your usage are also created, for example, based on a cookie ID. These profiles primarily contain information about your activities on our site and your interactions with its elements. The success of advertising campaigns—such as those on radio and television—can also be measured.

10.5 Functional Cookies

If you enable the “Functional” category, cookies will be set and personal data will be processed to provide additional website features.

10.6 Marketing Cookies

If you enable the “Marketing” category, cookies will be set and personal data will be processed in order to show you relevant sponsored content related to our services and to retarget you with our ads on third-party websites and offers. Here, too, only pseudonymized profiles are generally created, which contain information about your activities, interests, demographic information, or location. This information may also be combined with information from other sources held by us or by third parties. In doing so, information may also be processed across devices.

11. Comments or Questions

We take every possible precaution to protect and secure your data. We welcome your questions and comments regarding data protection. If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request information, correction, restriction, or deletion of data, or to revoke your consent, please contact us using the contact information provided above.

 

 

 

Last Review: June 2026

Privacy Policy

We are pleased that you are interested in our company. Data protection is a top priority for the management of ParkHere GmbH. In this Privacy Policy, we explain how we handle the personal data you provide on our website. You will learn what data we collect from you, why we collect it, how we use it, and how long we store it.

1. Responsibility and Contact Information 

The entity responsible for data processing on our website is:

ParkHere GmbH
Gollierstraße 70
80339 Munich
Phone: +4989125030301
Email: info@park-here.eu

The data protection officer for the data controller is:

Dr. Michael Funke

JBB Data Consult GmbH

95 Friedrichstr., 10117 Berlin
Email: dsb@park-here.eu

2. Data Processing on Our Website

When you visit our website and use its features, we process personal data. Unless otherwise stated, you are not required to provide us with personal data. However, in such cases, we generally cannot make our website and the services offered on it available to you. 

In the following sections, we explain what data we process, for what purposes, for how long, and on what legal basis. You will also learn to whom we disclose your data. At the end of this Privacy Policy, you will also find information on retention periods, general recipients, and automated decision-making.

2.1 General Use of the Website

Purposes: When you visit our website, we process certain data to enable you to use the website and its features.

Categories of Data: The data processed in connection with your use of the website typically includes your IP address—which is necessary to deliver the content of our online services to your device—as well as any information you enter on our website (e.g., language selection, form entries, search queries, or similar).

Recipients:

  • IONOS SE, Elgendorfer Str. 57, 56410 Montabaur

Legal basis: The legitimate interest in pursuing the stated purposes (Art. 6(1)(f) of the GDPR).

Retention period: We do not permanently store any personal data for the purposes mentioned.

2.2 Collection of Access Data and Log Files

Purposes: Server log files are stored when you visit our site. These server log files may be used, on the one hand, for security purposes—for example, to prevent server overload—and, on the other hand, to ensure server capacity and stability.

Categories of Data: These include the address and name of the web pages and files accessed, the date and time of access, the amount of data transferred, confirmation of successful access, browser type and version, the user’s operating system, the referrer URL (the previously visited page), and, as a rule, IP addresses and the requesting provider.

Recipient:

  • IONOS SE, Elgendorfer Str. 57, 56410 Montabaur

Legal basis: The legitimate interest in pursuing the stated purposes (Art. 6(1)(f) of the GDPR).

Retention period: The server log files are stored for [number] days and then deleted.

2.3 Contact

Purposes: When you contact us (via the contact form, email, or phone), the information provided by the individuals making the inquiry is processed to the extent necessary to respond to contact requests and any requested actions.

Categories of data: Master data (e.g., names, addresses), contact data (e.g., email, phone number), content data (e.g., entries in the online form), IP address.

Recipients:

  • HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA

Transfers to Third Countries: Data may be transferred to third countries, in particular the United States. HubSpot, Inc. is certified under the Data Privacy Framework, ensuring that an adequate level of protection is currently in place for data processing. Standard contractual clauses have also been entered into.           

Privacy Policy: HubSpot Privacy Policy

Legal basis: We respond to contact requests in the context of contractual or pre-contractual relationships in order to fulfill our (pre-)contractual obligations (Art. 6(1)(b) GDPR). In all other cases, this is based on our legitimate interest (Art. 6(1)(f) GDPR) in effectively responding to inquiries. 

Retention period: The personal data you submit to us via the contact form will be processed until your request has been appropriately handled and fulfilled.

2.4 ParkHere Support Bot

Purposes: If you need assistance, you can also contact us with questions via our ParkHere Support Bot. The input and information you provide will be processed to the extent necessary to respond to your inquiry. To ensure quality assurance, the chat is monitored and recorded by our service provider. 

Categories of Data: Master data (e.g., names, addresses), content data (e.g., chat entries), IP address.

Recipients:

  • HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA

Transfers to third countries: Data may be transferred to third countries, in particular the United States. HubSpot, Inc. is certified under the Data Privacy Framework, ensuring that an adequate level of protection is currently in place for data processing. Standard contractual clauses have also been entered into.           

Privacy Policy: HubSpot Privacy Policy

  • …

Legal Basis: We respond to inquiries within the scope of contractual or pre-contractual relationships in order to fulfill our (pre-)contractual obligations (Art. 6(1)(b) GDPR). Furthermore, this processing is based on our legitimate interest (Art. 6(1)(f) GDPR) in responding effectively to inquiries. 

Retention Period: The personal data you submit to us via the Support Bot will be processed until your request has been appropriately handled and fulfilled. The chats are stored for [number].

2.5 Newsletter

Purpose: You have the option to subscribe to our newsletter, through which we regularly inform you about our company’s offers.  

To subscribe to our newsletter, we use the so-called double opt-in procedure, which means we will only send you our newsletter once you confirm—by clicking a link in a message—that you are the owner of the specified contact method. If you confirm the address, we will store the address or number, the time of registration, and, if applicable, the IP address used for registration for verification purposes until you unsubscribe from the newsletter. 

Our newsletter contains so-called tracking pixels. A tracking pixel is a tiny graphic embedded in emails sent in HTML format to enable log file recording and analysis. This allows for a statistical evaluation of the success or failure of online marketing campaigns. Using the embedded web beacon, ParkHere GmbH can determine whether and when an email was opened by a data subject and which links contained in the email were clicked by the data subject.

Categories of data: Consent data (name, email address, time, IP address), usage data (messages opened, links clicked), personalization data. 

Recipient:

  • HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA

Transfers to Third Countries: Data may be transferred to third countries, in particular the United States. HubSpot, Inc. is certified under the Data Privacy Framework, ensuring that an adequate level of protection is currently in place for data processing. Standard contractual clauses have also been entered into.           

Privacy Policy: HubSpot Privacy Policy

Legal Basis: We process your data based on your consent pursuant to Article 6(1)(a) of the GDPR. 

Retention Period: The data will be processed until you withdraw your consent.

2.6 Job Applications

Purposes: When you apply for a position with us, we process personal data to the extent necessary to determine whether to establish an employment relationship.

Categories of Data: Identifying information (name, date of birth), contact information (address, email address), content data (such as a resume, cover letter, and references), and communication data.

Recipients:

  • allaboutHRLaw, Gartenstraße 12, 85609 Aschheim

Legal basis: Performance of a contract and pre-contractual inquiries (Art. 6(1)(b) of the GDPR) or legitimate interest in effectively responding to job applications (Art. 6(1)(f) of the GDPR).

Retention Period: If your application is successful, we will store your data for the purpose of carrying out the employment relationship (Art. 6(1)(b) GDPR in conjunction with § 26 BDSG).
If your application is rejected or withdrawn, we reserve the right to retain the data you submitted for 6 months from the end of the application process (rejection or withdrawal of the application) based on our legitimate interests (Art. 6(1)(f) GDPR). Thereafter, the data will be deleted, and the physical application documents will be destroyed. Retention serves, in particular, as evidence in the event of a legal dispute. If it becomes apparent that the data will be required after the 6-month period has expired (e.g., due to an impending or pending legal dispute), deletion will not take place until the purpose for continued retention no longer applies.

2.7 Consent Management

Purposes: To provide our website and its features, we may store information on your device or access features stored on it. To the extent that this involves features that are not strictly necessary, we will obtain your consent for such use. We also obtain your consent when we use optional third-party content (e.g., embedded videos or other content from external sources). Your consents are stored on your device to implement your desired settings and, if necessary, to provide evidence of the consents obtained.

Categories of data: Your consents, pseudonymous identifiers, and settings you have configured.

Recipients:  

  • Usercentrics GmbH Sendlinger Straße 7 80331 Munich, Germany

Legal basis: The legitimate interest in pursuing the stated purposes (Art. 6(1)(f) of the GDPR). 

Retention period: We do not store any data ourselves in this context.

2.8 Web Analytics, Monitoring, and Optimization

Purposes: Web analytics is used to evaluate visitors to our online offering and may include information about visitors’ behavior, interests, or demographic characteristics—such as gender—in pseudonymous form. This allows us, for example, to determine at what times our online offering or its features and content are used most frequently. Furthermore, it enables us to identify which areas require optimization. In addition to web analytics, we may also use testing methods to, for example, test and optimize different versions of our online offering or its components.

Categories of data: In particular, usage data (e.g., content accessed, features used, and technical details; access times; IP address); meta/communication data (e.g., device information); and system data (e.g., error messages). 

Service providers used:

  • Microsoft Clarity

Provider: Microsoft Deutschland GmbH, Walter-Gropius-Straße 5, 80807 Munich

Transfers to Third Countries: Data may be transferred to third countries, in particular the United States. Microsoft is certified under the Data Privacy Framework, ensuring that an adequate level of protection is currently in place for data processing. Standard contractual clauses have also been concluded.                         

Privacy Policy: https://policies.google.com/privacy?hl=de.  

  • Google Website Optimizer, Google Tag Manager, Google Analytics, and Google reCAPTCHA

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. 

Transfers to Third Countries: Data may be transferred to third countries, in particular the United States. Google LLC is certified under the Data Privacy Framework, ensuring that an adequate level of protection is currently in place for data processing. Standard contractual clauses have also been entered into.                         

Privacy Policy: https://policies.google.com/privacy?hl=de.  

Legal basis: Consent (Art. 6(1)(a) of the GDPR) and legitimate interests (Art. 6(1)(f) of the GDPR). 

Retention period: 

Withdrawal: You may withdraw your consent at any time through our Consent Management Platform.

2.9 Plugins and Tools 

Purposes: We use various types of embedded third-party content to make our website more user-friendly.

This website embeds videos from YouTube, so when you visit the corresponding page, a connection is established with YouTube’s servers. In the process, the YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account. We use YouTube in enhanced privacy mode. According to YouTube, videos played in enhanced privacy mode are not used to personalize the YouTube browsing experience. Ads displayed in enhanced privacy mode are also not personalized. No cookies are set in enhanced privacy mode. Instead, however, so-called local storage elements are stored in the user’s browser; these contain personal data similar to cookies and can be used for recognition purposes. Details on enhanced privacy mode can be found here: https://support.google.com/youtube/answer/171780.

Recipient:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. 

Transfers to Third Countries: Personal data is processed in the United States, which is a third country outside the EU. Google LLC is certified under the Data Privacy Framework, ensuring an adequate level of protection during processing.

Privacy Policy: https://policies.google.com/privacy?hl=de

Legal basis: Processing is based on your consent (Art. 6(1)(a) of the GDPR) or our legitimate interest (Art. 6(1)(f) of the GDPR). Our legitimate interest is to provide users with an interactive and engaging website.

Retention Period: We do not store any personal data.

3. Social Media Presence

We maintain profiles on social media platforms. Our social media accounts complement our website and offer you the opportunity to interact with us. As soon as you access our social media profiles on these platforms, the terms of service and data processing policies of the respective operators apply. The data collected about you when using these services is processed by social media platforms and may also be transferred to countries outside the European Union where there is no adequate level of protection for the processing of personal data. We generally have no control over data processing on social media platforms, as we are users of the platform just like you. We use the following social media platforms:

3.1 Facebook and Instagram

Our page is available at: [Link] and [Link]

The network operator is: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. 

The network’s privacy policy: https://www.facebook.com/about/privacy  and https://privacycenter.instagram.com/

3.2 LinkedIn

You can access our page at: https://de.linkedin.com/company/parkhere 

The network is operated by: LinkedIn Ireland Unlimited Company, Wilton Place,
Dublin 2, Ireland.

Network Privacy Policy: https://www.facebook.com/about/privacy and https://de.linkedin.com/legal/privacy-policy?trk=content_footer-privacy-policy.

3.3 Xing

You can access our page at: https://www.xing.com/pages/parkhere 

The network is operated by: New Work SE, Baumwall 7, 20459 Hamburg

Network Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung?nwt_nav=footer

3.4 X

Our page is available at: https://x.com/ParkHere_muc 

The network is operated by: X Internet Unlimited Company, One Cumberland Place
Fenian Street, Dublin 2, D02 AX07, Ireland

Network Privacy Policy: https://x.com/de/privacy

3.5 Joint Control

Purposes: We process personal data as the sole controller when you send us inquiries via our social media profiles. We process this data to respond to your inquiries. In addition, we are jointly responsible with the following networks for the following processing activities (Art. 26 GDPR). When you visit our profile on LinkedIn, the network collects aggregated statistics (“Insights data” or “Analytics data”) generated from certain events logged by its servers when you interact with our profiles and the associated content. We receive these aggregated and anonymous statistics from the network regarding the use of our profile. We are generally unable to associate the data with specific users. To a certain extent, we can specify the criteria according to which the network generates these statistics for us. We use these statistics to make our profiles more interesting and informative for you.  

For more information about this data processing on Facebook and Instagram, please see the Joint Controller Agreement at: https://www.facebook.com/legal/terms/information_about_page_insights_data

For more information about this data processing on LinkedIn, please see the Joint Controller Agreement at: https://legal.linkedin.com/pages-joint-controller-addendum. 

In all other respects, the network is solely responsible for the processing of your data. 

Legal basis: The processing is carried out on the basis of our legitimate interest (Art. 6(1)(f) GDPR). The legitimate interest lies in the respective purpose.  

Retention period: Under the joint controllership framework, we do not store any personal data ourselves. With regard to contact requests from outside the network, the information provided above regarding establishing contact applies accordingly.

4. General Information on Recipients

When we process your data, it may be necessary to transfer or disclose your data to other recipients. In the sections above regarding processing, we identify the specific recipients to the extent possible. If recipients are located in a country outside the EU, we indicate this separately under the individual points listed above. Unless we expressly refer to an adequacy decision, no adequacy decision exists for the respective recipient country. In these cases, we will agree on appropriate safeguards in the form of Standard Contractual Clauses to ensure an adequate level of data protection (unless other appropriate safeguards, such as binding corporate rules, are in place). You can access the current versions of the Standard Contractual Clauses at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj.

In addition to these specific recipients, however, data may also be transferred to other categories of recipients. These may include internal recipients—that is, individuals within our company—as well as external recipients. Possible recipients may include, in particular: 

  • Our employees who are responsible for processing and storing the data and whose employment relationship with us is subject to a confidentiality obligation. 
  • Service providers who act on our behalf as data processors bound by our instructions. These are primarily technical service providers whose services we use when we cannot provide certain services ourselves or when it would not be practical to do so.
  • Third-party providers who assist us in providing our services in accordance with our terms and conditions. For example: payment service providers or marketing service providers.  
  • With government authorities to comply with our legal and reporting obligations.

5. General Information on Retention Periods

We generally process your personal data for the retention period described above in each case. However, data is often processed not just for one purpose but for several, so even after the retention period has expired, we may continue to process your data for another purpose. In such cases, the retention period specified for that purpose applies. As soon as the last retention period has expired, we will delete your data immediately.

6. Automated Decision-Making and the Obligation to Provide Data

We do not use automated decision-making that produces legal effects concerning you or similarly significantly affects you.

7. What rights do you have regarding the personal data you provide to us?

You have the rights listed below, provided that the legal requirements are met. To exercise these rights, you may contact us at the address we have on file. 

  • Art. 15 GDPR – Right of access by the data subject: 

You have the right to request confirmation from us as to whether personal data concerning you is being processed, and if so, what data is being processed and the specific circumstances of the data processing. 

  • Art. 16 GDPR – Right to Rectification: 

You have the right to request that we correct any inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you also have the right to request that incomplete personal data be completed—including by means of a supplementary statement. 

  • Art. 17 GDPR – Right to erasure: 

You have the right to request that we erase personal data about you without undue delay. 

  • Art. 18 GDPR – Right to restriction of processing: 

You have the right to request that we restrict the processing of your personal data. 

  • Art. 20 GDPR – Right to Data Portability: 

You have the right, in cases where processing is based on consent or for the performance of a contract, to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and to transmit this data to another controller without hindrance from us, or to have the data transmitted directly to the other controller, to the extent that this is technically feasible. 

  • Art. 77 of the GDPR in conjunction with § 19 of the BDSG – Right to lodge a complaint with a supervisory authority: 

You have the right to file a complaint with a supervisory authority at any time—in particular in the Member State where you habitually reside, where you work, or where the alleged infringement occurred—if you believe that the processing of your personal data violates applicable law.

8. In particular, the right to object and the withdrawal of consent

  • Art. 21 GDPR – Right to object: 

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is necessary for the purposes of our legitimate interests or for the performance of a task carried out in the public interest, or that is carried out in the exercise of official authority. 

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims. 

To the extent that we process your personal data for direct marketing purposes, you have the right to object to such processing at any time. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. 

You may file your objection at any time, effective for the future, using one of the contact addresses provided to you. 

  • Withdrawal of Consent: 

You may withdraw your consent at any time, effective for the future, by contacting us at one of the contact addresses provided.   

9. Obligation to Provide Data

You have no contractual or legal obligation to provide us with personal data. However, without the data you provide, we are unable to offer you our services.

10. Cookie Policy

10.1 Why do we use cookies (and similar technologies)?

For the purposes mentioned above, we store information on your device and access information stored on your device. We do this using cookies or similar technologies, such as local storage (hereinafter collectively referred to as “cookies” for simplicity). 

Some of these cookies are strictly necessary for us to provide our services to you (Section 25(2)(2) of the TDDDG). We use cookies that are not strictly necessary for our website only with your express consent (Section 25(1) of the TDDDG), which you can give or withdraw at any time via our Cookie Policy and which you can revoke with future effect.

You can also view which specific cookies are stored and how long they remain on your device in the Privacy Preference Center. There, you will also find information on how the cookies are associated with the processing purposes mentioned above and the providers used.

10.2 What types of cookies do we use?

We use persistent and temporary cookies (“session cookies”). Session cookies remain on your device only until you close your browser session. Persistent cookies remain stored on your device until they expire or are deleted.

10.3 Strictly Necessary Cookies 

These cookies enable basic functions and are absolutely necessary for the website to function properly.

10.4 Statistics Cookies

If you consent to the “Statistics” category, cookies will be set and personal data will be processed to analyze your use of our services, improve our service for you, prevent bugs, and test new features. Pseudonymized profiles of your usage are also created, for example, based on a cookie ID. These profiles primarily contain information about your activities on our site and your interactions with its elements. They can also be used to measure the success of advertising campaigns, such as those on radio and television.

10.5 Functional Cookies

If you enable the “Functional” category, cookies will be set and personal data will be processed to provide additional website features.

10.6 Marketing Cookies

If you enable the “Marketing” category, cookies will be set and personal data will be processed to show you relevant sponsored content related to our services and to retarget you with our ads on third-party websites and offers. Here, too, only pseudonymized profiles are generally created, which contain information about your activities, interests, demographic information, or information about your location. This information may also be combined with information from other sources held by us or by third parties. In doing so, information may also be processed across devices.

11. Comments or Questions

We take every possible precaution to protect and secure your data. We welcome your questions and comments regarding data protection. If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request information, correction, restriction, or deletion of data, or to revoke any consent you have provided, please contact us using the contact information provided above.

 

Effective: June 2026

 

 

 

 

Any questions?
You'll find the answers here!