Privacy policy

Responsible Authority

We are happy about you visiting our website. We would like to introduce you to the responsible authority in terms of data protection law as applicable:

Room For Ideas GbR

represented by the Authorized Partners Sabine Simon
Schellenhofweg 1
50858 Cologne
Phone: +49 1774137670
E-mail: christoph@roomforideas.org

General Information

Pursuant to our statutory obligations, we would like to inform you about the collection and use of your personal data.

When you use our website, personal data about you will be collected. This may happen by you entering the data yourself, for example your e-mail address. But our system also collects your data automatically, for example whenever you visit our website. This happens irrespective of the device or the software that you use to visit our website.

All data that you enter in our app is provided voluntarily; there are no disadvantages to you if you do not provide data. But without certain data, we are unable to provide services or to conclude contracts. Whenever such information is necessary, we will point it out to you.

On this website, the user’s personal data is only collected within the framework of the existing data-protection law, in particular the General Data Protection Regulation (GDPR). The legal terms used in the text are defined in Art. 4 of the GDPR.

The GDPR allows data processing in three cases in particular:

  • in accordance with Art. 6 para. 1 (a) and 7 GDPR, when you have consented to us processing your data; in this Privacy Policy and in the cases of consent pursuant to Art. 4 no. 11 GDPR, we will inform you in detail and each time for what purposes and under what circumstances your data will be processed by us;
  • in accordance with Art. 6 para. 1 (b) GDPR, when processing your personal data is necessary for negotiating, concluding or performing a contract;
  • in accordance with Art. 6 para. 1 (f) GDPR, if the balancing of interests leads to the conclusion that the processing is necessary to protect our legitimate interests; these include in particular our interests in making our website technically available, keeping it secure and detecting malfunctions, evaluating its use and improving our offering and in using service providers for these purposes. We state the specific legitimate interests we pursue in the description of the respective processing.

Users‘ Rights - Information

You may request us anytime to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.

Inventory Data

We collect inventory data as far as it is necessary to establish, negotiate or amend a contract (including one without remuneration) between us and the user.

This can be: customer data (for example name, address), contact data (for example e-mail address, phone number), service data (for example services ordered, duration, payment).

Upon establishing the user relationship, we will ask you for this data (for example name, address and e-mail address) and will also tell you which of the information is required to establish the user relationship.

Usage Data

When you access our website, usage data is generated that is technically necessary to deliver the site, as well as usage data that we collect to evaluate the use of our website. This may include: details of the access (e.g. pages opened, time and duration of the visit), content data (e.g. data, text or images you enter or upload) and technical details (e.g. browser, device, IP address).

We only compile usage data for evaluation pseudonymously.

Insofar as information is stored on or read from your device for this purpose (e.g. by cookies or analytics scripts), this is done only with your consent pursuant to Art. 6 para. 1 (a) GDPR, which you may withdraw at any time with effect for the future via the cookie settings.

Otherwise, the legal basis is our legitimate interest pursuant to Art. 6 para. 1 (f) GDPR in evaluating and improving our website; you may object to this processing at any time.

Details of the services used can be found in the respective sections of this policy.

Hoster

STRATO AG

Our Website is presented in the Internet by a service provider.

We use the service of STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

We have concluded a data processing agreement with our provider.

With this contract, our provider is obliged to process the data according to our instructions.

You can find more information on data processing at our provider in his privacy policy at https://www.strato.de/datenschutz/.

The legal basis for this data processing is on the one hand our legitimate interest in a technologically perfect online offering and its design and optimization in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, and, on the other hand, our contractual or pre-contractual legal relationship in accordance with Art. 6 para. 1 (b) GDPR.

Each time this website is used, our provider processes information in so-called server log files, which your browser transmits automatically whenever a website is accessed. This data consists of:

  • your IP address
  • type and version of your browser
  • host name
  • time of visit
  • the page from which you came to our page
  • name of the page opened
  • exact time of usage as well as
  • the amount of data transferred

This data is processed in order to deliver the website, to ensure its secure and trouble-free operation and to analyse errors; this includes detecting and warding off attacks and abusive access. We do not evaluate the log files in order to identify you personally; they are attributed to a person only where this is necessary to investigate an attack or a malfunction. The log files are deleted as soon as they are no longer required for these purposes; they are retained for longer only insofar as a security incident needs to be investigated.“

Advertisements

Insofar as we send you advertising by email, we do so only with your consent or – for our own similar offers to existing customers – insofar as the law permits this without consent. You may object to the use of your email address for advertising at any time.

First Contact through Electronic Request

If you contact us in electronic form (for example by mail, fax, phone, messenger, etc.), we store and process the data which you have given us (for example name, contact information, content of the request). This is based on our legitimate interest in an effective communication with customers in accordance with Article 6 para. 1 (f) GDPR and, as far as it concerns a request to enter into or to perform a contract, also with Article 6 para. 1 (b) GDPR.

We will only pass on this data to third parties as far as required for the performance of the contract (in accordance with Article 6 para. 1 (b) GDPR), by the overwhelming interest in effective services (in accordance with Article 6 para. 1 (f) GDPR) or based on your consent (in accordance with Article 6 para. 1 (a) GDPR) or if there is another legal permission or obligation.

You may ask us at any time and without any cost to provide information about the purpose of the processing, the origin and the recipient, if any, of your data. You may also request that we correct, delete or limit the processing of your personal data. You may object against the (further) processing of your data at any time and you have a right for the data to be made transferable as well as the right to file a complaint with the competent supervisory agency.

In general, your data will only remain stored as long as required by the purpose of the respective data processing. A longer storage is an option, in particular when required in order to pursue our rights, for other legitimate interests of ours or when there is a statutory duty to keep the data longer (for example record-keeping under tax law, statute of limitations).

Storage Period

Generally, your data will only remain stored as long as required by the purpose of the respective data processing. Storage beyond that is possible in particular if it is still required for pursuing our rights or for other legitimate interests of ours.

For your inventory data which were necessary to perform a contract (including one without remuneration), this means that we store this data until the complete performance or termination of the contractual relationship plus the statutory limitation periods plus an adequate extra time for potential interruptions of the limitation period.

For your usage data which was collected in the course of your use of the website, this means that we will store it only for the time still required for the proper functionality and the security of our website and as long as we still have a legitimate interest. Statistical information will be primarily stored by us in pseudonymous form.

Beyond that, we still store your data for as long as we are required to do so by law. This concerns in particular commercial and tax-law retention obligations; in this respect, we store your data for their duration.

Cookies

In addition to technically necessary cookies, our website also uses cookies and comparable technologies that are not strictly necessary — for example for statistics, reach measurement, marketing or the integration of external content. We only use these if you have consented beforehand. We obtain your consent through a cookie notice (cookie banner) before any such cookies are set.

You can withdraw or adjust your consent at any time with effect for the future — through the cookie settings on our website. Which cookies are used in detail, what purpose they serve and how long they are stored can be seen in the cookie settings or in the cookie notice.

You can withdraw your consent at any time with effect for the future: Revoke consents.

Independently of this, you can also control the storage of cookies through your browser: you can block cookies entirely or in individual cases and delete cookies that have already been stored at any time. The manufacturers of common browsers explain how to do this:

If you block cookies completely, this may limit the functionality of our website and other websites. Information on advertising cookies from third-party providers and how you can manage them can be found at www.youronlinechoices.eu.

Transfer of data

Transfer to Third Parties

We dislike spam as much as you do. We will therefore not transfer your data to third parties, unless permitted by law.

Transfer of customer data may either

  • be required for the performance of a contract and in that case be permitted according to Art. 6 para. 1 (b) GDPR, or
  • be permitted based on our legitimate interest in an effective service structure pursuant to Art. 6 para. 1 (f) GDPR, or
  • covered by your consent pursuant to Art. 6 para. 1 (a) GDPR, or
  • become necessary if we will be legitimately asked by a government or an agency to hand over your data pursuant to Art. 6 para. 1 (c) GDPR.

If your data are transferred to third parties, this is mentioned in this privacy policy.

Transfer to other countries, particularly USA

Insofar as we transfer personal data to countries outside the European Union, in particular the USA, in accordance with the provisions set out below, we will only carry out such a transfer where an adequate level of data protection, appropriate safeguards or your consent, and thus a transfer permitted under the GDPR, is in place.

Users‘ Rights

You may request us anytime to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.

Deletion, Correction, Limitation

You may at any time demand from us that we correct (or complete) incorrect data as well as a limitation of the processing of data or deletion of your data. This applies in particular if the reason for processing the data is no longer valid, if a required consent has been revoked and there is no other legal basis or if our data processing is unlawful. We will then correct, block or even delete your personal data without delay as far as permitted by law.

Objection

The right to object to advertisement is governed by our text regarding consent:

Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time.

You just need to contact us without any particular formal requirement, for example by e-mail to the address given in our legal notice or – where we offer this – via a contact form or an unsubscribe link.

Your withdrawal has no effect on the legality of the data processing carried out up to that point.

Data Transfer

Subject to the conditions of Art. 20 GDPR, you may request that we provide you with the data you have provided to us in a structured, commonly used and machine-readable format or – where technically feasible – transmit it to another controller.

Complaint

If you feel that our data processing has violated any of your rights, you may file a complaint with the competent regulatory agency (here you find a list of the agencies).

Consent

Whenever we ask you for your consent for the processing of your data, we will inform you in clear language and in an easily accessible way about the cases for which you will be granting your consent. Any consent that we ask you for is voluntary.

Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time. You just need to contact us without any particular formal requirement, for example by e-mail to the address given in our legal notice or – where we offer this – via a contact form or an unsubscribe link. Your withdrawal has no effect on the legality of the data processing carried out up to that point.

Changes to the Privacy Policy

If and when factual or legal reasons will compel us to amend the Privacy Policy, we will update this page accordingly. This will not change the consent provided by the user.

Data Entry

Encryption of Data Entry

When you enter data on our website, whether in a contact form, during the registration process, when you log in or for payment purposes, the website, where you enter the data, is encrypted. Thus, third parties can not read what you enter. You will recognise the encryption by the lock symbol in your browser and by the URL beginning with “https“ instead of “http“.

Contact Forms

General contact form

When you fill out a contact form or when you send us an e-mail or another electronic message, your information will be stored for the processing of the request, for possible follow-up questions or for other related questions and will only be used to follow up with the request.

Your data will be transferred in an encrypted manner, preventing third parties from reading your data while it is being entered.

Basis for this storage is the safeguarding of our legitimate interests in regard to communication with interested users pursuant to Art. 6 para. 1 (f) GDPR and in the case of inquiries prior to entering into a contract also the performance of a contract pursuant to Art. 6 para (b) GDPR.

Your data remains stored for as long as the processing of the request requires, in particular as long as the storage is still necessary to perform the contract, to pursue our rights or for our other legitimate interests or we are compelled by law to keep your data stored (for example based on tax-law requirements to maintain files).

Google

Google Tag Manager

With the Google Tag Manager, marketers can use an interface to administer website tags.

The Tag Manager activates other tags, which may in turn collect data; you will find the respective declarations on these third-party providers in this Privacy Policy.

When the Tag Manager is loaded, its script is retrieved from Google servers and executed in your browser; in this process, your IP address and technical information about your browser and device are transmitted to Google.

If you have consented through our cookie notice, we use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on the basis of your consent pursuant to Art. 6 para. 1 (a) GDPR.

You can withdraw your consent at any time with effect for the future by opening the cookie settings on our website and adjusting your selection.

The lawfulness of the processing carried out until the withdrawal remains unaffected.

When using this provider, it may happen that your data is transferred to the USA. However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions see the Google Ads Data Processing Terms for further information. The Google Ads Data Processing Terms are available here: https://business.safety.google/adsprocessorterms/.

Further information can be found in the user guidelines of Google and the privacy policy of Google for this product.

Last updated: 2026-10-02