Note: This is an English translation for informational purposes only. The legally binding version is the original German document.
CoStore is pleased about your interest in our company and our services. We want you to feel comfortable when contacting us. Therefore, the security of your personal data that arises when contacting CoStore – such as name, address, telephone number or email address – is an important concern for us.
This privacy information is directed at all persons with whom CoStore ("we" or "us") interacts, including customers, potential customers, interested parties and visitors to our websites, users of our apps/applications, other users of our products or services, and visitors to our locations ("you" or "your"). It contains the information according to Art. 13 and 14 GDPR.
The processing of personal data takes place within the framework of legal regulations.
Personal data is all information that relates to an identified or identifiable natural person. Processing includes any operation related to personal data – such as collecting, recording, storing, adapting, using, transmitting or deleting. Further terms correspond to the definitions in Art. 4 GDPR.
CoStore Holding GmbH
Große Rheinstrasse 22
76661 Philippsburg
We collect and process your personal data particularly in the following cases:
Please keep your information up to date and inform us of changes – especially your contact details.
We process in particular the following data: Name, address, telephone number, email address, if applicable company name, function, business contact details as well as contract and transaction data, as far as they are necessary for the business relationship.
We process personal data for the reservation, rental and management of storage space as well as for the processing of rental contracts and additional services, in particular:
Booking, management and termination are handled through our partner Kinnovis. You will receive transaction-related emails (e.g., contract documents, collection information, invoices) according to Art. 6 para. 1 lit. b GDPR. These are necessary for contract fulfillment and cannot be unsubscribed from.
Further information: https://kinnovis.com/privacy-policy/
User registration takes place via Kinnovis (www.kinnovis.com). Name, email address, telephone number and if applicable company name are processed. More information: kinnovis.com/privacy-policy
In case of payment arrears, data (name, address, contract and invoice data) may be transmitted to collection agencies or lawyers. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest).
Personal data is stored as long as it is necessary for contract processing. After that, statutory retention periods apply. We delete requests at the latest 12 months after completion, unless legal obligations prevent this.
We have order processing contracts according to Art. 28 GDPR with all service providers, ensuring data protection and data security.
We process personal data for the organization, implementation and follow-up of visits and events.
For appointment planning and coordination we use Microsoft services. Legal basis: Art. 6 para. 1 lit. b GDPR. Privacy information: microsoft.com/de-de/privacy/privacystatement
For freely accessible events, image and video recordings may be created for documentation and public relations purposes.
You can object to the processing of image and video data for personal reasons. Please inform us or the photographers on site so that we can take appropriate measures.
In addition to our products, we offer service and consultation services by telephone, email, contact form, WhatsApp Business, chatbot (JaneGPT by Kinnovis) or on site. Bookings or contract conclusions are exclusively handled via Kinnovis.
Service inquiries are stored for up to 12 months after processing and then deleted, unless statutory retention periods exist.
We offer newsletter services to regularly inform about products, services and offers.
For registration to our newsletter, we use the double-opt-in procedure. This means:
You can unsubscribe from the newsletter at any time via an unsubscribe link in every email or by making a direct request to us. After unsubscribing, your email address will be removed from the mailing list, unless legal retention obligations exist.
For sending our newsletters, we use the email marketing service provider Klaviyo. Your data is processed exclusively on our behalf and is subject to Klaviyo's privacy policies. Further information can be found here: https://www.klaviyo.com/legal.
We ensure that Klaviyo acts as a processor according to Art. 28 GDPR and a GDPR-compliant data processing agreement (DPA) has been concluded with us.
We store your email address and preferences for the newsletter as long as you are subscribed. After unsubscribing, the data will be deleted within 30 days, unless other legal obligations exist.
In the context of using our storage facilities and accessing our locations, we process personal data, particularly for access control, security and monitoring of the sites. This includes:
Our locations are equipped with overt video surveillance to ensure the protection of facilities, employees and customers. Video surveillance is conducted particularly:
Video recordings are generally stored for a maximum of 14 days and then automatically deleted, unless security-related incidents require longer storage (e.g., official investigations).
For enhanced security of our locations, we work with external security service providers who monitor the video surveillance in real-time outside our business hours (between 10:00 PM and 8:00 AM). If security-related events occur, the security service can take appropriate measures or notify law enforcement authorities.
Video surveillance is indicated by appropriate signage at the locations. Customers and visitors have the right at any time to request information about stored recordings or to object to the processing, unless overriding security interests oppose this.
In the context of our corporate communication and public relations, we process personal data, particularly for documentation of events, press work and digital media appearances. This includes in particular:
During our corporate events, image and video recordings may be made that are used for internal and external communication, reporting or advertising purposes. The recordings may be published on:
If you do not wish recordings of you to be published, you can object to the use at any time. We will then take appropriate measures to ensure your right to data protection.
We process personal data to the extent necessary for the assertion, exercise or defense of legal claims or to fulfill legal obligations. This includes:
To the extent legally permissible based on Art. 6 para. 1 lit. f GDPR or if you give us your consent (Art. 6 para. 1 lit. a GDPR), we process your data particularly for advertising communication, customer satisfaction surveys, promotional campaigns and for conducting competitions. This enables us to specifically improve our products and services and respond more individually to customer needs.
We are subject to a variety of legal obligations for the processing and retention of personal data. These concern, for example, commercial and tax retention requirements according to the German Commercial Code and Fiscal Code.
Data processing also takes place in the context of quality management, for determining and improving customer satisfaction, for further development of products and services, for conducting research and development, and for improving IT security and IT operations. The latter point also includes processing for detecting and preventing unauthorized access to personal data.
For the aforementioned purposes, data may be shared with third parties who support the responsible party in pursuing the stated purposes.
We store your personal data only as long as necessary for the purposes for which they were collected or as long as storage is required by law or within the framework of official requirements.
For all questions regarding the processing of personal data, our Data Protection Officer Marcel Philipp Lang is available to you. You can reach him at the following email address: datenschutz@costore.de.
We implement technical and organizational measures to protect personal data from unauthorized access, loss or manipulation.
For the technical provision and security of our website as well as the booking and payment processes, we use the following service providers:
Hosting and cloud services for providing our website and applications. AWS processes data in data centers worldwide. Further information: https://aws.amazon.com/privacy/
Web design and hosting platform for designing and managing our website. Further information: https://webflow.com/legal/privacy
Payment service provider for processing online payments. Stripe processes, among other things, payment information, IP addresses and metadata for fraud prevention. Further information: https://stripe.com/de/privacy
Booking and contract management platform through which rental contracts are processed and managed. Further information: https://kinnovis.com/privacy-policy/
Tool for managing cookie consents according to GDPR requirements. This allows users to individually adjust their privacy settings. Further information: https://www.consentmanager.de/datenschutz
Security and performance service for securing our website against attacks and for faster delivery of content. Further information: https://www.cloudflare.com/de-de/privacypolicy
Content Delivery Network (CDN) for fast delivery of our web content via distributed servers worldwide. Further information: https://aws.amazon.com/cloudfront/
Provision of map services for locations and navigation. Google may process user data such as IP addresses or location data. Further information: https://policies.google.com/privacy?hl=de
Provision of fonts for uniform display of the website. IP addresses may be processed by Google. Further information: https://fonts.google.com/about
Provision of icons and other libraries for website design. Further information: https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net
Provision of icons and other static files for website optimization. Further information: https://unpkg.com/
Online telephony for receiving calls. Data is stored for processing telephone connections. Further information: https://www.sipgate.de/datenschutz
Additionally, we use the following services to improve our website functionality, for analysis purposes and for marketing and communication measures:
Web analytics service for collecting and analyzing usage behavior on our website. IP anonymization is activated, meaning IP addresses are anonymized within the EU or EEA before storage. Further information: https://policies.google.com/?hl=de
Management of marketing and tracking tags without direct collection of personal data. Further information: https://policies.google.com/?hl=de
Advertising based on user behavior with cookies for interest-based advertisements. Further information: https://policies.google.com/technologies/ads?hl=de
Integration of Facebook functions for social interactions and advertising measures. Further information: https://de-de.facebook.com/about/privacy/
Enables display of personalized advertisements based on your visit to our website. Further information: https://de-de.facebook.com/about/privacy/
Use of Facebook advertising forms for collecting user inquiries. Further information: https://de-de.facebook.com/about/privacy/
Email marketing service for sending newsletters and personalized customer communication. Further information: https://www.klaviyo.com/legal/privacy-policy
Enables online booking of appointments. Further information: https://privacy.microsoft.com/de-de/privacystatement
Online forms for collecting customer inquiries and feedback. Further information: https://privacy.microsoft.com/de-de/privacystatement
For customer communication via a GDPR-compliant business account. Users can contact us via WhatsApp, whereby metadata (e.g., phone number, timestamp) is processed. Further information: https://www.whatsapp.com/legal/business-data-processing-terms
The processing of personal data is based on the following legal bases according to GDPR:
Data Transfer to Third Parties: If transfer to service providers or partner companies is necessary, we ensure that they comply with data protection requirements (e.g., through data processing agreements or standard contractual clauses).
We store personal data only as long as necessary for the respective purpose. After the purpose ceases to exist or statutory retention periods expire, the data will be deleted.
The following general periods apply:
If deletion is not possible (e.g., due to statutory retention obligations), processing will be restricted.
For all questions regarding the processing of personal data, our Data Protection Officer Marcel Philipp Lang is available to you. You can reach him at the following email address: datenschutz@costore.de.
We process personal data for various purposes, including:
The exact processing depends on the services and platforms used in each case. A detailed breakdown can be found in the respective sections of this privacy policy.
We implement technical and organizational measures to protect personal data from unauthorized access, loss or manipulation. These include among others:
We point out that when using third-party services (e.g., social media, cloud services) additional security risks may exist over which we have no influence. We recommend informing yourself about the respective privacy policies of the providers.
.png){kind=icon}
.png)
