Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Bellatrix Verwaltungs- und Beteiligungs GmbH
Ludwig-Ganghofer-Straße 7, 82031 Grünwald, Germany
Phone: +49 (0)89 64 18 64 31
Email: service@parken-am-karlsplatz.de

2. General

We process personal data only to the extent necessary to provide this website, to respond to your enquiries or to comply with legal obligations. The legal bases are in particular Art. 6 (1) (b) GDPR (contract or pre-contractual measures), (c) (legal obligation) and (f) (legitimate interest). This website is transmitted in encrypted form (TLS/HTTPS).

3. Hosting and server log files

This website is operated by an external hosting provider with whom a data processing agreement has been concluded. When the website is accessed, technical data is automatically stored in server log files: IP address, date and time of access, page accessed, referrer URL, browser type and operating system. This processing serves to ensure secure and stable operation (Art. 6 (1) (f) GDPR). The log files are deleted after a short period unless they are needed to investigate security incidents.

4. Jetpack (security and maintenance)

To secure and manage the website, we use the WordPress plugin Jetpack provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Among other things, Jetpack protects the website against attacks on the login area; in doing so, IP addresses and technical access data may be transferred to Automattic servers, including in the USA. Automattic is certified under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in secure operation (Art. 6 (1) (f) GDPR).

5. Contact form and email

If you contact us via the contact form or by email, we process your details (name, email address, subject, message and, if provided, phone number) to handle your enquiry (Art. 6 (1) (b) or (f) GDPR). If your request concerns day-to-day car park operation, we forward it to city-parking Deutschland Betriebs GmbH as the operator of the car park. Your data will be deleted once your enquiry has been fully dealt with, unless statutory retention obligations apply.

Spam protection (Cloudflare Turnstile)

To protect the contact form against spam and automated access, we use the Turnstile service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile checks whether the input comes from a human when the form is loaded and submitted. Technical data such as IP address, browser and device information is transferred to Cloudflare, including in the USA. Cloudflare is certified under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in a secure contact form free from abuse (Art. 6 (1) (f) GDPR).

6. Cookies

This website does not use cookies for analytics or advertising purposes and does not use any tracking services. Technically necessary cookies are set only for logged-in editors in the administration area (Section 25 (2) TDDDG).

7. Fonts

This website uses system fonts or fonts stored locally on our server. No connection is made to servers of Google or other font providers.

8. Links to map services

We link to Google Maps and OpenStreetMap on our website. No maps are embedded. Only when you click on one of these links are you redirected to the respective provider; the provider’s privacy policy applies to any data processing there.

9. Video surveillance in the car park

In the car park, the entrance and exit, the pay station area and the stairwell are under video surveillance. Other areas, in particular the parking levels, are not monitored. Signs on site indicate the surveillance.

The controller is Bellatrix Verwaltungs- und Beteiligungs GmbH named in section 1; only it has access to the recordings. The purpose is to exercise domiciliary rights, to protect the facility against damage, theft and vandalism and to investigate incidents. The legal basis is our legitimate interest in these purposes (Art. 6(1)(f) GDPR).

The storage period is governed by the statutory requirements: recordings are deleted as soon as they are no longer required for these purposes. If an incident needs to be investigated, we keep the relevant footage until the investigation is complete and only pass it on to the police, prosecuting authorities or insurers where necessary. Your rights under section 10 apply accordingly; in particular, you may object to the processing on grounds relating to your particular situation (Art. 21 GDPR).

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Please use the contact details above.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.

11. Changes

We will update this privacy policy if our website or the legal requirements change. The current version published on this page applies.