PRIVACY POLICY
With this Privacy Policy, we would like to inform you about the nature, scope, and purpose of the processing of personal data (hereinafter also referred to simply as “data”). Personal data includes all information that relates to you personally, such as your name, address, email address, or user behaviour. This Privacy Policy applies to all data processing activities carried out by us, both as part of our core business activities and in connection with the online media and services we provide.
Who Is Responsible for Data Processing
The controller responsible for data processing is:
Urban Standards GmbH
Managing Director: Christian Gärtner
Mittererstr. 3
80336 Munich
Germany
+49 89 6933 735 21
info@urban-standards.com
https://www.urban-standards.com/english
Privacy Policy for the MIM Mobile App
This Privacy Policy also applies to the “MIM” mobile app.
The provider of the app and the controller responsible for the processing of personal data in connection with the use of MIM is:
Urban Standards GmbH
Mittererstr. 3
80336 Munich
Germany
Email: info@urban-standards.com
Privacy: datenschutz@urban-standards.com
The MIM app was developed on behalf of Urban Standards GmbH by Exxeta AG. In the Google Play Store, the app is listed under the developer name “Exxeta AG”. The rights to the app are held by Urban Standards GmbH.
The following provisions of this Privacy Policy apply to the processing of personal data in connection with the use of MIM.
Processing of Your Data in the Course of Our Company’s Core Business Activities
If you are our customer or business partner, or if you are interested in our services, the nature, scope, and purpose of the processing of your data are determined by the contractual or pre-contractual relationship existing between us.
In this context, the data we process includes all data that you provide or have provided for the purpose of using contractual or pre-contractual services and that is required to process your inquiry or the contract concluded between us.
Unless otherwise stated in the additional provisions of this Privacy Policy, the processing of your data and its disclosure to third parties is limited to data that is necessary and appropriate for responding to your inquiries and/or fulfilling the contract concluded between you and us, safeguarding our rights, and complying with legal obligations.
We will inform you before or during the collection of data which information is required for these purposes. Where we use third-party providers to deliver our services, the privacy policies of the respective third-party providers apply.
Data concerned:
Master data, such as names and addresses
Payment data, such as bank account details and invoices
Contact data, such as email addresses, telephone numbers, and postal addresses
Contract data, such as the subject matter and duration of the contract
Data subjects: Prospective customers, business partners, and contractual partners
Purpose of processing: Performance of contractual services, communication and responding to contact inquiries, and office and organizational procedures
Legal basis: Performance of a contract and pre-contractual inquiries, Art. 6(1)(b) GDPR; legal obligation, Art. 6(1)(c) GDPR; legitimate interests, Art. 6(1)(f) GDPR
Your Rights under the GDPR
Under the GDPR, you have the rights listed below, which you may exercise at any time by contacting the controller identified in Section 1 of this Privacy Policy:
Right of access: You have the right to request information from us as to whether we process your data and, if so, which data we process.
Right to rectification: You have the right to request the correction of inaccurate data or the completion of incomplete data.
Right to erasure: You have the right to request the deletion of your data.
Right to restriction of processing: In certain cases, you have the right to request that we process your data only to a limited extent.
Right to data portability: You have the right to request that we transmit your data to you or another controller in a structured, commonly used, and machine-readable format.
Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. The competent supervisory authority is the authority responsible for your habitual place of residence, your place of work, or our registered office.
Right to Withdraw Consent
You have the right to withdraw any consent you have given to the processing of your data at any time.
Right to Object
You have the right to object at any time to the processing of your data where such processing is based on our legitimate interests pursuant to Art. 6(1)(f) GDPR.
If you exercise your right to object, we ask that you explain your reasons. We will then cease processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests and rights.
Irrespective of the above, you have the right at any time to object to the processing of your personal data for advertising and data analysis purposes.
Please direct your objection to the controller using the contact details provided above.
When Do We Delete Your Data?
We delete your data when we no longer need it or when you instruct us to do so. This means that, unless otherwise stated in the individual privacy notices contained in this Privacy Policy, we delete your data:
when the purpose of the data processing no longer applies and, consequently, the respective legal basis stated in the individual privacy notices no longer exists, for example:
following termination of the contractual or membership relationship between us (Art. 6(1)(a) GDPR), or
once our legitimate interest in the continued processing or storage of your data no longer exists (Art. 6(1)(f) GDPR);
if you exercise your right to withdraw consent and there is no other statutory legal basis for the processing pursuant to Art. 6(1)(b)–(f) GDPR;
if you exercise your right to object and there are no compelling legitimate grounds preventing deletion.
However, if we are required to retain certain parts of your data for other purposes—for example, due to statutory tax retention periods, generally six years for business correspondence and ten years for accounting records; for the establishment, exercise, or defence of legal claims arising from contractual relationships, up to four years; or to protect the rights of another natural or legal person—we will delete the relevant data only after the expiry of those periods.
Until those periods expire, we restrict the processing of such data to these purposes, in particular compliance with retention obligations.
Cloud Services
We use cloud services in particular:
to store and process documents;
to send documents by email or exchange files of any kind;
to manage appointments and calendars;
to prepare and deliver presentations and spreadsheets;
to publish files of any kind;
for internal and external communication via chats, audio conferences, and video conferences.
The software applications we use for these purposes are provided by the providers listed below on their servers, which we access via the internet.
Where you transmit data to us in the course of communicating with us or as part of other processes described in this Privacy Policy, we process such data using the cloud services we use. This means that your data may be stored on the servers of third-party cloud service providers.
The third-party providers process usage and metadata in order to secure their servers and optimize their services. In particular, we process and store your contact, customer, and contract data.
If we use a cloud service to make files of any kind publicly available through our website, the respective third-party cloud provider may store cookies on your computer system when you access those files. The service provider may process the data collected in this way to analyze your usage behaviour or browser settings.
Please note that, depending on the country in which the service provider listed below is based, the data specified below may be transferred to and processed on servers located outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that enforcement of your rights may be difficult or restricted.
Where a service provider used by us offers processing exclusively within the EU, we intend—where this has not already been implemented—to process your data exclusively within the EU.
Data concerned:
Master data, such as names and addresses
Contact data, such as email addresses and landline/mobile telephone numbers
Content data, such as photos, videos, and text
Usage data, such as access times, websites visited, and interest in content
Metadata, such as IP addresses and computer system information
Data subjects: Prospective customers, communication partners, customers, employees and applicants, including current and former employees
Purpose of processing: Organization of office and administrative activities
Legal basis: Consent, Art. 6(1)(a) GDPR; performance of a contract and pre-contractual inquiries, Art. 6(1)(b) GDPR; legitimate interests, Art. 6(1)(f) GDPR
Cloud service providers used:
Apple iCloud
Provider: Apple Inc., Infinite Loop, Cupertino, CA 95014, USA
Website: https://www.apple.com/de/
Privacy Policy: https://www.apple.com/legal/privacy/de-ww/
Dropbox
Provider: Dropbox, Inc., 333 Brannan Street, San Francisco, California 94107, USA
Website: https://www.dropbox.com/de
Privacy Policy: https://www.dropbox.com/privacy
Microsoft Cloud Services
Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Website: https://www.microsoft.com/de-de/microsoft-365/onedrive/online-cloud-storage
Privacy Policy: https://privacy.microsoft.com/de-de/privacystatement
Cookies
Our website uses cookies. Cookies are small text files consisting of a sequence of numbers and letters that are stored on the device you use.
Cookies are primarily used to exchange information between your device and our website. This may include, for example, language settings on a website, login status, or the point at which a video was last viewed.
Two types of cookies are used when you visit our website:
Temporary cookies (session cookies): These store a session ID that allows different requests from your browser to be assigned to the same session. Session cookies are deleted when you log out or close your browser.
Persistent cookies: Persistent cookies remain stored even after you close your browser. This allows our website to recognize your computer when you return. These cookies may store, for example, language preferences or login information. They may also record and store your browsing behaviour. This data may be used for statistical, marketing, and personalization purposes.
Cookies can also be categorized according to their purpose:
Necessary cookies: These are cookies that are strictly required for the operation of our website, for example to maintain logins or shopping carts during your session or to provide security-related functionality.
Statistics, marketing, and personalization cookies: These cookies are used for analytics or audience measurement. Such tracking cookies may, for example, store information about search terms entered or how frequently pages are viewed.
They may also store the browsing behaviour of individual users, such as viewing certain content or using certain functions, in a user profile. Such profiles are used to display content that corresponds to users’ potential interests.
Where we use services that store cookies on your device for statistical, marketing, or personalization purposes, we provide separate information about this in the sections below or when obtaining your consent.
Data concerned:
Usage data, such as access times and webpages clicked
Communication data, such as information about the device used and IP address
Data subjects: Users of our online services
Purpose of processing: Delivery of our website, ensuring website operation, improvement of our online offering, communication, and marketing
Legal basis: Legitimate interests, Art. 6(1)(f) GDPR.
Where we do not request your consent before setting cookies, we base the processing of your data on our legitimate interest in improving the quality and user-friendliness of our website, particularly its content and functions.
You may object to the use of cookies set on the basis of our legitimate interests through your browser’s security settings. There you can specify whether you wish to reject all cookies, accept them only upon request, or automatically delete them whenever you close your browser.
If cookies are disabled for our website, some website functions may no longer be fully available.
Web Hosting
We use a service provider to host our website. Our website is stored on the provider’s servers and made available for retrieval over the internet.
The provider may process all data transmitted by the browser you use and generated when using our website. This includes, in particular, your IP address, which the provider requires in order to deliver our online offering to your browser, as well as any information you enter via our website.
The provider may also collect:
date and time of access to our website;
time zone difference from Greenwich Mean Time (GMT);
access status (HTTP status);
amount of data transferred;
internet service provider of the accessing system;
browser type and version;
operating system used;
website from which you may have reached our website;
pages or subpages that you visit on our website.
The above-mentioned data is stored as log files on the provider’s servers. This is necessary to ensure the stability and security of our website.
Data concerned:
Content data, such as posts, photos, and videos
Usage data, such as access times and webpages clicked
Communication data, such as device information and IP address
Data subjects: Users of our website
Purpose of processing: Delivery of our website and ensuring its operation
Legal basis: Legitimate interests, Art. 6(1)(f) GDPR
Web hosting provider commissioned by us:
Squarespace
Provider: Squarespace Ireland Ltd., Le Pole House, Ship Street Great, Dublin 8, Ireland
Website: https://de.squarespace.com/
Privacy Policy: https://de.squarespace.com/data-privacy
Content Delivery Network
We use a Content Delivery Network (CDN) to deliver our website. A CDN is a network of regionally distributed servers connected via the internet.
The CDN provides scalable storage and delivery capacity, thereby optimizing the loading times of our website and ensuring optimal data throughput even during periods of high demand.
User requests to our website are routed through CDN servers. Statistics are generated from these data flows. This serves both to identify potential threats to our website from malicious software at an early stage and to continuously improve our services and make our website more user-friendly.
Please note that, depending on the country in which the service provider listed below is based, data collected through the service may be transferred to and processed outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that enforcement of your rights may be difficult or restricted.
Data concerned:
Content data, such as posts, photos, and videos
Usage data, such as access times and webpages clicked
Communication data, such as device information and IP address
Purpose of processing: Technical optimization of the website and analysis of errors and user behaviour
Legal basis: Legitimate interests, Art. 6(1)(f) GDPR
CDN provider used:
Squarespace
Provider: Squarespace Ireland Ltd., Le Pole House, Ship Street Great, Dublin 8, Ireland
Website: https://de.squarespace.com/
Privacy Policy: https://de.squarespace.com/data-privacy
Contacting Us
If you contact us by email, social media, telephone, fax, post, our contact form, or by any other means and provide personal data such as your name, telephone number, or email address, or provide additional information about yourself or your request, we process this data in order to respond to your inquiry in the context of our pre-contractual or contractual relationship.
Data concerned:
Master data, such as names and addresses
Contact data, such as email addresses, telephone numbers, and postal addresses
Content data, such as text, photos, and videos
Contract data, such as the subject matter and duration of the contract
Data subjects: Prospective customers, customers, business partners, and contractual partners
Purpose of processing: Communication, responding to contact inquiries, and office and organizational procedures
Legal basis: Performance of a contract and pre-contractual inquiries, Art. 6(1)(b) GDPR; legitimate interests, Art. 6(1)(f) GDPR
Web Analytics and Statistics
We use web analytics services to record and statistically evaluate visitor traffic on our website.
These services collect, among other things, information about the website from which you reached our website (the referrer), which pages of our website you accessed, how long you visited our pages, and which interactions you performed there.
They also collect information about the browser and computer system you use, as well as the type of device. Such services may also collect demographic information, such as age or gender, in pseudonymized form. Where you have consented to the collection of location data, this may also be processed depending on the provider.
To collect and store this information, the web analytics service we use generally places a cookie on your device, which also collects the IP address assigned to you. However, this is shortened using an IP-masking process so that the IP address can no longer be associated with your visit to our website.
Furthermore, no directly identifying information such as names or email addresses is stored. Neither we nor the service provider we use knows the identity of visitors to our website.
Please note that, depending on the country in which the service provider listed below is based, data collected through the service may be transferred to and processed outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that enforcement of your rights may be difficult or restricted.
Data concerned:
Usage data, such as access times and webpages clicked
Communication data, such as device information and IP address
Data subjects: Users of our online services
Purpose of processing: Audience measurement, campaign performance measurement, remarketing, and interest- and behaviour-based marketing
Legal basis: Where we have requested your consent before using the respective service, consent constitutes the legal basis pursuant to Art. 6(1)(a) GDPR. Otherwise, we use the respective service on the basis of our legitimate interest in analysing visitor traffic on our website in order to continuously improve its functions, offerings, and user experience, Art. 6(1)(f) GDPR.
We use the following web analytics services:
Squarespace
Provider: Squarespace Ireland Ltd., Le Pole House, Ship Street Great, Dublin 8, Ireland
Website: https://de.squarespace.com/
Privacy Policy: https://de.squarespace.com/data-privacy
Content Services
We use certain services to provide specific content or graphics through our website, including videos, images, music, fonts, and map material.
The services we use process the IP address assigned to you at the time you visit our website, as this is necessary to display the relevant content in your browser.
The providers of these services may also place additional cookies on your device, through which information about your usage behaviour, interests, device, browser, and the time and duration of your session may be collected.
Providers regularly use such information for analytics, statistical, and marketing purposes. This information may also be combined with information obtained from other sources. This applies in particular where you maintain an account with the service provider and are logged into that account at the time of your session.
Please note that, depending on the country in which the service provider listed below is based, the data specified below may be transferred to and processed on servers outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that enforcement of your rights may be difficult or restricted.
Data concerned:
Usage data, such as access times and webpages clicked
Communication data, such as device information and IP address
Data subjects: Users of our website
Purpose of processing: Delivery of our website, provision of content, and ensuring the operation of our website
Legal basis: Consent via the cookie consent banner, Art. 6(1)(a) GDPR; legitimate interests, Art. 6(1)(f) GDPR
We use the following content services:
Google Web Fonts
Google Web Fonts enables us to integrate fonts (web fonts) into the design of our website and display them correctly in your browser.
These web fonts are integrated by means of a server request to Google. The fonts are transmitted from Google to your browser in compressed form and then decompressed there. The relevant server is generally located in the United States.
If you visit one of our pages on which Google Fonts is integrated, Google receives information about which of our webpages you visited.
Provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
EU establishment: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://fonts.google.com/
Privacy Policy: https://policies.google.com/privacy
Adobe Typekit
The fonts used on our website are also obtained through the Typekit service.
These web fonts are integrated by means of a server request to Adobe. The fonts are transmitted from Adobe to your browser in compressed form and then decompressed there. The relevant server is generally located in the United States.
If you visit one of our pages on which Typekit fonts are integrated, Adobe receives information about which of our webpages you visited.
Provider: Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland
Website: https://www.adobe.com/de
Privacy Policy: https://www.adobe.com/de/privacy.html
Our Online Presence on Social Networks
We maintain online profiles on the social networks listed below.
When you visit one of these profiles, the respective provider collects and processes the data described below. As a rule, this data is collected for advertising and market research purposes and used to create user profiles.
Data may be stored in such user profiles independently of the device you use. This applies in particular where you are a member of the respective platform and are logged in.
Providers may use these user profiles to display interest-based advertising to you. You have the right to object to the creation of user profiles. To exercise this right, you must contact the respective provider.
If you have an account with one of the providers listed below and are logged into that account when visiting our website, the respective provider may collect information about your usage behaviour on our website.
To prevent your data from being linked in this way, you can log out of the provider’s service before visiting our website.
For information about the purposes and scope of the data collected by each provider, please refer to the respective providers’ privacy policies listed below.
Please note that, depending on the country in which the provider listed below is based, data collected through its platform may be transferred to and processed outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that enforcement of your rights may be difficult or restricted.
Data concerned:
Master and contact data, such as name, address, telephone number, and email address
Content data, such as posts, photos, and videos
Usage data, such as access times and webpages clicked
Communication data, such as device information and IP address
Purpose of processing: Communication and marketing, monitoring and analysis of user behaviour
Legal basis: Consent, Art. 6(1)(a) GDPR; legitimate interests, Art. 6(1)(f) GDPR
Options for objection: For the respective opt-out options, please refer to the information provided by the individual providers linked below.
We maintain online profiles on the following social networks:
Provider: LinkedIn Corporation, 1000 W Maude, Sunnyvale, CA 94085, USA
German office: LinkedIn, Hofstatt 4th Floor, Sendlinger Str. 12, 80331 Munich, Germany
Website: https://www.linkedin.com/?trk=nav_logo
Privacy Policy: https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy
Security Measures
We implement appropriate technical and organizational security measures in accordance with the current state of the art in order to comply with applicable data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.
Validity and Amendments to This Privacy Policy
This Privacy Policy is currently valid as of August 2026. Changes to statutory or regulatory requirements may make it necessary to amend this Privacy Policy.
This Privacy Policy was created with the assistance of the privacy policy generator provided by SOS Recht. SOS Recht is a service offered by Mueller.legal Rechtsanwälte Partnerschaft, based in Berlin.