Privacy Policy ampido GmbH

This Privacy Policy informs you about how we collect, use, process and protect personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) when you visit our website www.ampido.com.

1 Controller and data protection officer

The controller within the meaning of the GDPR, other data protection laws applicable in the member states of the EU and other provisions of a data protection nature is

Address:

ampido GmbH
Bismarckstraße 19
50672 Cologne
Germany

Contact:

Phone: 0221 / 6776911 (costs at landline rate)
Email: support@ampido.com

Data protection officer:
datenschutz@ampido.com

2 What data is processed?

By using the ampido website, data is transferred to ampido. This concerns the following categories:

  • IP address
  • Functions used
  • Search queries
  • Date and time
  • the operating system of the end device used by the respective user
  • Type and version number of the Internet browser used by the user to access the ampido website

The following categories are also affected during registration:

  • E-mail address (+ password)
  • Payment information (for paid use)
  • Mobile phone number (for paid use)
  • Vehicle licence plate number (for fee-based use)

Our users also have the option of providing further voluntary information about themselves. They can decide for themselves in the settings of their ampido account which information they wish to disclose and to what extent.

3. legal basis for data processing

We process your personal data on the basis of one or more of the following legal bases:

  • Your consent pursuant to Art. 6 para. 1 lit. a GDPR.
  • Fulfilment of a contract or pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR.
  • Fulfilment of a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR.
  • Protection of legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR.

4 Purpose of the data processing

ampido analyses the behaviour of its visitors in the network in order to continuously improve the offer and the technical functionality of ampido and to optimally align it to the needs of its visitors. For this purpose, anonymised user profiles are created. When evaluating these profiles, the identity of the user remains unknown. ampido ensures with the help of its technical and organisational measures that the anonymised user profiles cannot be merged with the personal data of the (end) users.

The collection, storage, processing and use of the data also serve to provide our users with the products and services of the ampido marketplace via the ampido website and to be able to process customer support enquiries.

In exceptional cases, we may pass on your data to third parties (see section 9) if this is required by law or if this is necessary to fulfil our obligations.

When registering for the ampido newsletter, the e-mail address provided by the user will be used by ampido for its own advertising purposes until the user unsubscribes from the newsletter. Cancellation is possible at any time. An e-mail to support@ampido.com or an informal letter to ampido GmbH, Bismarckstraße 19, 50672 Cologne is sufficient for this purpose.

5 Your rights under the GDPR

  • Right to information (Art. 15 GDPR):**

You have the right to receive confirmation from us as to whether personal data is being processed, as well as access to this data and further information on the processing.

  • Right to rectification (Art. 16 GDPR):**

You have the right to have incorrect or incomplete personal data that we have stored about you corrected.

  • Right to erasure ("right to be forgotten") (Art. 17 GDPR):**

Under certain circumstances, you have the right to request the erasure of your personal data. This applies in particular if the data is no longer required for the purposes for which it was collected or if the processing was unlawful.

  • Right to restriction of processing (Art. 18 GDPR):**

Under certain circumstances, you can request the restriction of the processing of your personal data. This means that your data may only be processed to a limited extent, e.g. during a verification of the accuracy of the data.

  • Right to data portability (Art. 20 GDPR):**

You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format and, if necessary, to transmit it to another organisation.

  • Right to object (Art. 21 GDPR):**

You have the right to object to the processing of your personal data on grounds relating to your particular situation. However, this only applies if the processing is based on legitimate interests or is necessary for the exercise of official authority.

Please contact us at the above e-mail address to exercise your rights. We will process your request in accordance with the provisions of the GDPR and respond and process it accordingly.

6 Data protection and security

The security of your data is of the utmost importance to us. We continuously strive to achieve an optimal level of security for our users and customers within our services. To this end, we implement a range of technical and organisational measures to protect your personal data from unauthorised access, misuse and loss.

  • Technical security measures

Encryption:_

Communication between your end device and our services takes place via encrypted connections (e.g. SSL/TLS) to ensure the protection of your data during transmission.

Access controls:_

Access to personal data is restricted to authorised personnel who have been trained in data protection regulations.

Security checks:_

We regularly back up data (backups), which are overwritten at regular intervals (cycle of four weeks) and thus permanently deleted. In the event of the complete deletion of a user profile, backups of the user profile are also deleted. ampido uses constantly updated firewalls and other security systems. These are designed to provide users with the best possible protection against viruses and other unauthorised access when using ampido services.

  • Organisational measures**

Employee training:_

Our employees are continuously trained and sensitised to data protection issues.

Privacy by design and default:

We attach great importance to data protection right from the development stage of our services and integrate appropriate protective measures.

Reaction to security incidents:

In the very unlikely event of a data leak, we will immediately take appropriate measures to contain it and inform the affected users and the supervisory authorities in accordance with the legal requirements.

We recognise that despite our constant efforts and the implementation of the most advanced security technologies, ensuring complete security at all times in the digital world is an enormous challenge. Therefore, we cannot guarantee that our security measures will ensure the protection of personal data from any form of unauthorised access under all conceivable circumstances. We also recommend that our users pay attention to the security of their data, especially when choosing strong passwords and regularly checking their account settings.

We are not responsible for protecting against viruses outside our network. We also accept no liability for damage or loss of data caused by unknown viruses.

7 Changes to the privacy policy

We reserve the right to change this privacy policy at any time. Updates will be published on our website and our app.

8. storage and deletion of data

We only store your personal data for as long as is necessary for the purposes for which it was collected or as required by law. The exact storage period may vary depending on the type of data and the legal requirements. After the storage period has expired, your data will be deleted or anonymised.

9 Third-party providers and data transfer

We use the services of third-party providers to offer certain services and functions and to improve the user experience on our website. These third-party providers may therefore have access to your personal data, but only to the extent necessary to provide these services. We take appropriate measures to ensure that these third-party providers protect your data in accordance with applicable data protection laws.

9.1 Cookies

Current web browsers provide a cookie database. The web server of a visited website can store information there in the form of HTTP cookies and read it when the page is visited again. By placing cookies, users are only assigned anonymous user IDs. Under no circumstances are programmes executed on the user's computer or computer viruses transmitted.

ampido uses permanent cookies to authenticate the user when logging in. This makes it easier for the user to log in to ampido. The use of cookies therefore serves solely to ensure the smooth operation and improvement of ampido's services.

In addition, every user has the free choice of accepting cookies, being informed when a cookie is placed or generally rejecting all cookies through settings in their web browser. However, it is not possible to use ampido's services if cookies are generally rejected.

9.2 Server log files

Each time the user visits ampido, the user's web browser transmits access data that is automatically stored in log files, the so-called server log files, by ampido. These log files contain the following information:

IP address by which the computer can be identified

  • Remote host (name and IP address of the computer requesting the page)
  • Time, status, geo-information, amount of data transferred and the website from which the user came to the requested page (referrer)
  • Product and version information of the browser used (user agent)

ampido uses the standardised "combined" log file format of the Apache web server for this purpose. The log files are analysed for statistical purposes, e.g. to identify faulty links. The log files are then deleted.

This data is not merged with other data sources, in particular with personal user data. However, ampido reserves the right to check log files still stored for the last known IP address of a user in the event of a specific breach of law or contract. This is primarily for the protection of ampido members and the security of ampido member data.

9.3 Google Maps

ampido uses the Google Maps API application.

Address:

Google Inc.
1600 Amphitheatre Parkway, Mountain View,
CA 94043
USA

This allows us to display maps on the ampido platform and enables you to use the maps. After you have given your consent via your respective operating system, we use Google Maps to interactively show you the distance of the car park to the destination you are looking for. The Google Maps API application is therefore essential for the use of ampido services. Your GPS location data is only passed on to Google in anonymised form. The identification of your person is excluded in this way.

Type of data processed:_

IP addresses and location data of users (data is only collected with your consent in accordance with Art. 6 para. 1 lit. a GDPR)

Legal basis_

The use of Google Maps is based on a legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR - the interest in the appealing presentation of our online offers and easy findability of the places indicated in our services.

Data transmission and processing

The information collected by Google Maps is usually transferred to a Google server in the USA and stored there. The data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Storage_

Further information on the handling of user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/

Right to object and opt-out

Users can prevent the storage of cookies by selecting the appropriate settings in their browser software. Users have the right to object to the creation of user profiles by Google.

To the general terms of use:

https://policies.google.com/terms?hl=de

To the special terms of use of Google Maps: https://www.google.com/help/terms_maps.html

To the privacy policy:

https://policies.google.com/privacy?hl=de

9.4 Google Analytics & Google Adwords

9.4. 1 Google Analytics

ampido uses the analytics service Google Analytics.

Address:

Google Inc.
1600 Amphitheatre Parkway, Mountain View,
CA 94043
USA

Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

Legal basis

The use of Google Analytics is in the interest of a needs-based design and continuous optimisation of our services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

IP anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA.

Contract data processing

We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Right to object

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

To the general terms of use:

https://www.google.com/intl/de/policies/privacy/

To the special terms of use of Google Analytics:

https://marketingplatform.google.com/about/analytics/terms/us/

To the privacy policy:

https://policies.google.com/privacy?hl=de

9.4.2 Google Ads

ampido uses the online advertising programme "Google Ads" and conversion tracking as part of Google AdWords.

Address:

Google Inc.
1600 Amphitheatre Parkway, Mountain View,
CA 94043
USA

ampido uses Google Ads, an online advertising service, to place adverts (so-called Google AdWords) on external websites in order to direct visitors to our website. This enables us to target our advertising campaigns in order to draw the attention of potential users to our offers.

Conversion tracking:_

We also use conversion tracking as part of Google Ads. When you click on an advert placed by Google, a cookie for conversion tracking is stored on your computer. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used for personal identification. The information collected using the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking.

Legal basis:_

The processing of your data in the context of Google Ads is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR, provided that you have expressly given your consent via our cookie banner.

Possibility of objection and removal:_

You can prevent the installation of cookies by selecting the appropriate settings in your browser. However, we would like to point out that in this case you may not be able to use all functions of the service to their full extent. You can also prevent participation in conversion tracking by setting your configuration so that cookies from the domain "www.googleadservices.com" are blocked.

To the general terms of use:

https://policies.google.com/terms?hl=de

To the specific terms of use of Google Ads:

https://support.google.com/adspolicy/answer/54818?hl=en

To the privacy policy:

https://policies.google.com/privacy?hl=de

9.5 Mailings and newsletters

Ampido uses the provider MailChimp, a newsletter distribution platform, to send emails and newsletters to communicate with existing customers.

Address:

Rocket Science Group, LLC
675 Ponce De Leon Ave NE #5000
Atlanta, GA 30308
USA

Type of data processed:

  • Contact information: Names and email addresses of subscribers required for sending newsletters and communications
  • Interaction data: Information about how recipients interact with the emails sent, including open rates, clicks on links and time of interaction

Legal basis:_

This data is processed on the basis of consent in accordance with Art. 6 para. 1 lit. a GDPR. Subscribers have expressly given their consent to the processing of their personal data for email marketing purposes.

Purpose:_

MailChimp enables us to create and send newsletters and to analyse interactions with them in order to improve the effectiveness of our communication.

Disclosure:_ MailChimp does not use the data of our newsletter recipients to write to them itself or pass it on to third parties.

Objection:_ You have the right to object to the processing of your personal data at any time.

To the terms of use:

https://mailchimp.com/de/legal/terms/

To the general data protection regulations:

https://www.intuit.com/privacy/statement/

To the special data protection provisions for users from the EU: https://www.intuit.com/privacy/statement/jan-2022/

MailChimp has appointed the following legal representative in the EU/EEA in accordance with the third country provisions of the GDPR:

Intuit Data Protection Administration,
Cardinal Place, 80 Victoria Street,
London, SW1E 5JL
United Kingdom

https://quickbooks.intuit.com/uk/gdpr/

9.6 Customer service

ampido uses the Planio customer service platform to process customer enquiries.

Address:

Planio GmbH
Rudolfstr. 14
10245 Berlin
Germany

Type of data processed:

Planio processes Personal Data such as Usage Data, email addresses, first and last names, company information and other specific details. Full details of each type of personal data processed are provided in the dedicated sections of this Privacy Policy or selectively through explanatory texts displayed prior to data collection.

Legal basis:_

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR for the fulfilment of a contract to which the data subject is a party or for the implementation of pre-contractual measures. In addition, Art. 6 para. 1 lit. f GDPR also serves as the legal basis, which permits data processing on the basis of a legitimate interest, provided that the interests, fundamental rights and freedoms of the data subject do not prevail.

Purpose:_

This data processing serves various purposes, including the provision and optimisation of Planio services, compliance with legal obligations, communication with users, marketing and advertising. Security measures are taken to protect data from unauthorised access.

Storage:_

Data is stored for as long as is necessary for the purposes for which it was collected or as required by law.

Objection:_

You have the right to object to the processing of your personal data at any time.

Planio's servers are located in the EU. You are entitled to all data subject rights under the GDPR.

To the terms of use:

https://plan.io/de/nutzungsbedingungen/

To the privacy policy:

https://plan.io/de/datenschutzerklaerung/

9.7 Payment service provider

ampido uses the services of Adyen for the processing of payment transactions:

Address:

Adyen N. V.
Simon Carmiggeltstraat 6-50
1011 DJ Amsterdam
Netherlands

Adyen is a leading global payment service provider that enables us to offer a variety of payment methods and process transactions securely and efficiently.

Adyen processes personal data that is necessary for the execution of the respective financial transaction. Ampido would like to point out that the following lists are not exhaustive and that the specific data processing in individual cases depends on the respective transaction type:

Type of data processed:

  • Contact information: Name, address and other contact details required to process the payment.
  • Payment information: Credit card numbers, bank account information and other specific data necessary to process the payment.
  • Transaction data: Information about the transactions carried out, such as purchase amount and time of transaction.

Legal basis:_

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of personal data for the fulfilment of a contract to which the data subject is a party or for the implementation of pre-contractual measures.

Purpose:_

Processing of payments

Storage:_

Data is stored for as long as is necessary for the purposes for which it was collected or as required by law.

Disclosure:_

Identity and verification providers, screening partners, card programme providers, payment systems (e.g. Visa, Mastercard), credit reference agencies, supervisory authorities, Adyen Customer Relationship Management ("CRM") systems

Contradiction:_

You have the right to object to the processing of your personal data at any time.

Under certain circumstances, Adyen may transfer your personal data outside the EU/EEA. In this case, Adyen has taken appropriate protective measures. When Adyen transfers data to its own group companies, these are protected by an intra-group agreement containing standard contractual clauses. Standard contractual clauses apply to service providers in the United States and other service providers based outside the EU/EEA. You are entitled to all data subject rights under the GDPR.

To the terms of use:

https://www.adyen.com/de_DE/legal/terms-and-conditions

To the privacy policy:

https://www.adyen.com/de_DE/richtlinien-und-haftungsausschluss/privacy-policy

9.8 Private providers via ampido

In order to provide parking facilities, personal data of users is processed by the private individuals offering parking spaces in order to ensure effective mediation between users looking for parking spaces and private individuals who provide parking facilities (such as garages or parking spaces) on a temporary basis.

Type of data processed

We process the following categories of personal data as part of our service:

  • Name of the user (as well as contact details, if applicable): For identification and communication with the user.
  • Vehicle licence plate number: To clearly assign the vehicle to a reserved parking space and to avoid ambiguities or misuse of our services.

Legal basis

The processing of this data is based on Art. 6 para. 1 lit. b GDPR, which permits the processing of personal data for the fulfilment of a contract or pre-contractual measures to which the data subject is a party.

Storage and erasure_

The data collected will only be stored for as long as is necessary for the provision of our service and the fulfilment of the contracts concluded between the users and the providers of parking facilities. The data will then be deleted, provided there are no statutory retention obligations to the contrary.

Forwarding of data

The user's data (name and licence plate number) is made available to the parking facility providers solely for the purpose of allocating and using the parking spaces. Booking-specific data (vehicle registration number, start and end time of the booking) may be passed on by the providers to third-party companies for the sole purpose of checking the authorised use of the parking space. This data will not be passed on to third parties unless this is necessary due to legal requirements.

Rights of the persons concerned

Users have the right to obtain information about the personal data processed by us, to request rectification or erasure of their data, to restrict processing, to object to processing and the right to data portability. They also have the right to lodge a complaint with a supervisory authority.

10 Enforcement of and compliance with the privacy policy

We are committed to complying with the standard set out in this privacy policy and to constantly working to improve data protection in the interests of its users.

(as of 11 February 2024)