Data Policy — HouseEurope! non-profit

Data Policy

Thank you for visiting our website and for your interest in our organisation.

When you visit our website, use our online services, or enter into or show interest in a contractual relationship with us, your personal data may be processed. Protecting your data is important to us, and with this Privacy Policy, in accordance with Art. 13 of the General Data Protection Regulation (GDPR), we would like to inform you about how we handle your personal data (hereinafter also referred to as “data”).

Last updated: 21 August 2025

A. GENERAL

I. Definitions
II. Controller

B. DATA PROCESSING CRITERIA

I. Contests / Sweepstakes
II. Visiting Our Website
1. Logfiles
2. Data Security
3. Cookies
III. Use of Our Online Services
1. Contact
2. Newsletter
IV. Use of Service Providers
1. Google Analytics
2. Meta Pixel
3. Google reCAPTCHA
4. Mapbox
V. Online Presence on Social Media

C. STORAGE AND DELETION OF DATA

D. YOUR DATA SUBJECT RIGHTS

E. RIGHT TO OBJECT

F. DATA PROCESSING WHEN ACCESSING LINKED CONTENT

G. AUTOMATED DECISION-MAKING / PROFILING

H. AMENDMENTS TO THIS PRIVACY POLICY

A. GENERAL

I. Definitions

Our Privacy Policy is intended to be easy to read and understand for our website visitors and users, as well as for our supporters, business partners, and interested parties. To ensure this, we would like to explain the most important terms. In this Privacy Policy, we use, among others, the following definitions:

“personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”), e.g., name, address, email addresses, user behavior;

“processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction;

“controller” means the natural or legal person, authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;

“processor” means a natural or legal person, authority, agency, or other body which processes personal data on behalf of the controller;

“profiling” means any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

II. Controller

Unless otherwise specified in this Privacy Policy, the controller within the meaning of Art. 4 (7) GDPR is:

HouseEurope! gGmbH
Am Wasserwerk 22F
10365 Berlin
info@houseeurope.eu
+49 30 689 08 401

For specific questions regarding the processing of your personal data and to exercise your rights under the GDPR, you may contact us at the above addresses at any time.

B. DATA PROCESSING ACTIVITIES

I. Contests / Sweepstakes

We occasionally conduct sweepstakes via our official accounts on Instagram and TikTok. The provider of the Instagram platform is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Instagram”). The provider of the TikTok platform is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”).

In the context of your participation in the sweepstake, we process in particular the following personal data:
+ your Instagram or TikTok username (account name)
+ the content of the participation post (image, video, hashtag as well as any other visible information from your public profile)

A winner will be randomly selected from all eligible participants. The winner will be notified via a direct message on the respective platform (Instagram or TikTok) and asked to provide their email address in order to enable the processing of the prize.

Since participation in the sweepstake is reserved exclusively for persons aged 18 and over, we reserve the right to verify the age details of participants. If necessary, we may request additional proof for age verification.

For the purpose of prize processing, we subsequently collect the following data by email:
+ name
+ address
+ bank details – only if required for the payout.

In the event of a win and subject to your consent, we will publish your name in the newsletter, on our website, on our social media channels, and where applicable in other media.

We process your personal data exclusively for the purpose of determining and notifying the winner, delivering or paying out the prize, and – if you have consented – publishing the winner. The conduct of the sweepstake, including the determination and notification of the winner, is based on contract performance pursuant to Art. 6 para. 1 lit. b GDPR. The processing of the prize, for example the payout by bank transfer, is likewise based on contract performance pursuant to Art. 6 para. 1 lit. b GDPR. The publication of the winner takes place solely on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR.

The data collected will be stored only for the duration of the sweepstake and for the processing of the prize. After completion of the sweepstake, the data will be deleted unless statutory retention obligations apply.

The processing of data on Instagram is carried out by Meta Platforms Ireland Limited. The processing of data on TikTok is carried out by TikTok Technology Limited. In both cases, a transfer to third countries, in particular the USA, may take place. For such transfers, Standard Contractual Clauses pursuant to Art. 46 GDPR apply and – in the case of the USA – certification under the EU-U.S. Data Privacy Framework (DPF) (for Meta). Further information can be found in the section “Online Presence on Social Media” as well as in the providers’ privacy policies:

Instagram: https://privacycenter.instagram.com/policy
TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy

II. Visiting our Website

1. Logfiles

When using the website for informational purposes only, i.e., simply viewing it without registering and without otherwise transmitting information to us, we process the following personal data transmitted by your browser to our server.

+ IP address
+ date and time of the request
+ time zone difference to Greenwich Mean Time (GMT)
+ content of the request (visited page)
+ access status/HTTP status code
+ amount of data transmitted in each case
+ referring page
+ browser type
+ operating system used
+ language and version of the browser software
+ hostname of the accessing computer

These data are technically necessary for us to display our website to you and to ensure stability and security, and therefore must be processed by us. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR.

2. Data Security

For security reasons and to protect the transmission of confidential content, such as inquiries you send to us, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the change of the browser address line from “http://” to “https://” and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

3. Cookies

In some areas of our website, we use cookies. Cookies are small text files that are stored by the browser on your device (e.g., computer, tablet, or mobile phone) when you visit a website and can be read by us or by a third-party provider. They serve to identify your device for a certain period of time.

Some of the cookies we use are so-called “session cookies,” which are automatically deleted after the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit.

Some cookies are necessary for the use of our website. These cookies are not used for analysis, tracking, or advertising purposes. In part, they contain only information about specific settings and are not personal. These cookies are essential for user navigation, security, and operation of the website. We use these cookies on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR in order to ensure basic functions of the website.

You can set your browser to inform you about the placement of cookies, making the use of cookies transparent for you. You can also delete cookies at any time via the corresponding browser setting and prevent the setting of new cookies. However, please note that this may result in our website no longer being displayed and that some functions may no longer be technically available.

In addition, we use technically non-essential cookies on the basis of your consent. These processing operations take place only after your express consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 Telecommunications-Telemedia Data Protection Act (TDDDG). You can withdraw your consent at any time by clicking on the settings button at the bottom of the screen.

Further information on the individual cookies we use on our website can be found in our cookie consent banner.

III. USE OF OUR ONLINE SERVICES

1. Contact

When you contact us (e.g., online contact form, email, telephone, or via social media) as well as in the context of an existing business relationship with us, your data will be processed insofar as this is necessary to respond to your inquiry and any requested measures.

Regardless of the communication method chosen, we collect the content of your inquiry (e.g., entries in online contact forms, including first and last name, email address, availability).

We process your data for the following purposes: individual communication with you, management and response to inquiries, provision of our online services, and user-friendliness.

We process your data to safeguard our legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR in order to respond appropriately to inquiries. If you are inquiring about a prospective or existing contractual relationship, processing takes place for the implementation of pre-contractual measures pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.

2. Newsletter

You have the option to subscribe to our newsletter. With our newsletter we inform you about us and our initiative. To subscribe to the newsletter, your email address and name are required. If you wish to register as a supporter with us, we require some additional information:

We collect your place of residence in order to inform you specifically about actions and events in your region. In addition, you can voluntarily provide further information – for example, in which roles you would like to support us, your telephone number, your age group, or your sector. This information helps us to make our initiative even more accessible and inclusive.

When you subscribe to the newsletter, your data will be transmitted to us (or our email provider) and stored there. After registering you will receive an email to confirm your subscription (“double opt-in”).

The dispatch of our newsletter is based on your prior express consent, Art. 6 para. 1 sentence 1 lit. a GDPR. You can unsubscribe from the newsletter at any time, either by sending a message to the contact details described in this Privacy Policy or via a link provided for this purpose in the newsletter. After unsubscribing, we delete your data from the recipient list unless you have expressly consented to further use of your data pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve a further data use that is legally permitted and about which we inform you in this Privacy Policy.

IV. USE OF SERVICE PROVIDERS

In the course of our business activities and for the provision of certain services, we use service providers as processors. We have concluded processing agreements (DPAs) with the respective service providers. When transferring your data to third countries, we ensure that an adequate level of protection is guaranteed. This is either through recognition of the respective countries as safe by the EU (adequacy decision), specific approved contracts (standard contractual clauses, SCCs), or, if necessary, through obtaining your express consent.

1. Google Analytics

If you have given your consent, Google Analytics, a web analytics service of Google, is used on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

This service creates pseudonymized usage profiles and uses cookies (see “Cookies” above). The information generated by the cookie about your use of this website (browser type/version, operating system used, time of the server request, referrer URL (the previously visited page), hostname of the accessing computer (IP address)) is transmitted to a Google server in the USA and stored there.

Google processes the data in the USA. The data is used to evaluate the use of the website, to compile reports on website activity, and to provide other services related to website and internet usage for the purposes of market research and demand-oriented design of these internet pages. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Your IP address will under no circumstances be merged with other data from Google. The IP addresses are anonymized so that allocation is not possible (IP masking).

For the transfer of data to the USA, the following applies: Google is certified under the EU-U.S. Data Privacy Framework (DPF) and has committed to complying with European data protection principles. In addition, we have concluded EU standard contractual clauses (SCCs) pursuant to Art. 46 para. 2 lit. c GDPR with Google to ensure compliance with the EU data protection level.

The use of Google Analytics takes place on the basis of your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 TDDDG. You can withdraw your consent at any time by clicking on the settings button at the bottom of the screen.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing a browser add-on: https://tools.google.com/dlpage/gaoptout?hl=de.

Further information on data processing by Google can be found in Google’s privacy policy.

2. Meta Pixel

We use the Meta Pixel of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”), on our website. With the help of the Meta Pixel, Meta can track whether you have accessed our website after clicking on an advertisement we placed with Meta. This enables us to measure the effectiveness of our ads (conversion tracking) and to display targeted interest-based advertising to you in the future (retargeting).

The following data may be processed when using the Meta Pixel:
+ IP address
+ information about browser and device
+ pages visited and actions taken on our website
+ pixel ID and Meta cookie data

Meta may link this data to your Facebook or Instagram account and use it for its own advertising purposes. If you are registered with a Meta service, Meta can assign the visit to our website to your profile. Even if you are not registered with Meta, Meta may collect and process data about you via the Meta Pixel.

The use of the Meta Pixel takes place on the basis of your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 TDDDG. You can withdraw your consent at any time by clicking on the settings button at the bottom of the screen.

Meta also processes data in the USA. Meta is certified under the EU-U.S. Data Privacy Framework (DPF) and thereby commits to complying with European data protection principles. In addition, we have concluded EU standard contractual clauses (SCCs) pursuant to Art. 46 para. 2 lit. c GDPR with Meta in order to ensure an adequate level of data protection.

Further information on data processing by Meta can be found in Meta’s privacy policy at: https://www.facebook.com/privacy/policy

3. Google reCAPTCHA

To protect our website against misuse and spam, we use the Google reCAPTCHA service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

reCAPTCHA is intended to check whether entries on our website (e.g., in a contact form) are made by a natural person or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as you access our website. For the analysis, reCAPTCHA evaluates various information (e.g., IP address, length of stay of the visitor, mouse movements).

The data collected during the analysis is transmitted to Google and processed there. Google may also process this data in the USA. Google is certified under the EU-U.S. Data Privacy Framework (DPF) and has committed itself to complying with European data protection principles. In addition, we have concluded EU standard contractual clauses (SCCs) pursuant to Art. 46 para. 2 lit. c GDPR with Google to ensure compliance with the EU data protection level.

Data processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in protecting our website from abusive automated spying and from spam, as well as in ensuring secure and functional use of our online services.

Further information on Google reCAPTCHA as well as Google’s privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html

4. Mapbox

On our website we use the Mapbox map service of Mapbox Inc., 740 15th Street NW, 5th Floor, Washington, D.C. 20005, USA, to display interactive maps and geographic information clearly.

When you access a page that contains a Mapbox map, a connection to Mapbox’s servers is automatically established. In the process, personal data – in particular your IP address as well as information about browser and device – may be transmitted to Mapbox in the USA and stored there. In addition, Mapbox uses cookies and similar technologies to improve the map display and optimize user-friendliness.

The use of Mapbox takes place only if you have expressly consented in advance (Art. 6 para. 1 sentence 1 lit. a GDPR). In addition, we have a legitimate interest in making our online presence more attractive by integrating map functions (Art. 6 para. 1 sentence 1 lit. f GDPR).

Mapbox also processes data in the USA. The company is certified under the EU-U.S. Data Privacy Framework (DPF) and has committed itself to complying with European data protection principles. In addition, we have concluded EU standard contractual clauses (SCCs) pursuant to Art. 46 para. 2 lit. c GDPR with Mapbox to ensure an adequate level of data protection.

Further information on data processing by Mapbox can be found in the privacy policy of Mapbox at: https://www.mapbox.com/legal/privacy

V. ONLINE PRESENCE ON SOCIAL MEDIA

We operate various presences on so-called social media platforms. We operate presences with the following providers:

LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; website: https://de.linkedin.com/; privacy policy: https://www.linkedin.com/legal/privacy-policy

YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; website: https://www.youtube.com/; privacy policy: https://policies.google.com/privacy

TikTok, TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland; website: https://www.tiktok.com/; privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/de

Instagram, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; website: https://www.instagram.com/; privacy policy: https://help.instagram.com/519522125107875

For these information services we use the technical platform and the services of the respective providers. We would like to point out that you use our presences on social media platforms and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g., commenting, rating, sharing).

When visiting our social media presences, the platform providers collect, among other things, your IP address as well as other information stored on your device in the form of cookies. This information is used to provide us, as the operator of the accounts, with statistical information about your interactions with our posts. The data collected about you in this context is processed by the platforms and may also be transferred to countries outside the EU, in particular the USA.

All of the above-mentioned providers (except TikTok) are certified under the EU-U.S. Data Privacy Framework (DPF) and have committed themselves to complying with European data protection principles. In addition, we have concluded EU standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR with these providers, including TikTok, to ensure compliance with the EU data protection level.

It is not known to us in what way the social media platforms use the data from your visit to our account and your interactions with our posts for their own purposes, how long this data is stored, and whether it is passed on to third parties. Data processing may vary depending on whether you are registered and logged in to the social network or whether you visit the page as a non-registered and/or non-logged-in user. When accessing a post or our account, the IP address assigned to your device is transmitted to the provider of the social media platform. If you are currently logged in, a cookie on your device can track how you move around the web. Through buttons embedded in websites, the platforms can record your visits to these websites and assign them to your profile in order to offer you targeted content or advertising. To avoid this, you should log out, deactivate the “stay logged in” function, delete the cookies present on your device, and restart your browser.

As the provider of the information service, we also only process the data that you provide to us within the scope of using our service and that requires an interaction. For example, if you ask us a question that we can only answer by email, we store your information according to the general principles of our data processing described in this Privacy Policy. The legal basis for processing your data on the social media platform is Art. 6 para. 1 sentence 1 lit. f GDPR.

For requests for information and the assertion of data subject rights, we also point out that these can be most effectively asserted with the providers. Only the providers have access to the users’ data and can take appropriate measures and provide information directly. If you still need assistance, you may contact us.

The providers of the social media platforms explain in their privacy policies what information they receive and how this is used. These statements (see links above) also contain information about contact options and the setting options for advertisements.

C. Storage and Deletion of Data

The data we process will be deleted in accordance with the statutory provisions as soon as your consent to data processing is revoked or when the purpose for processing this data no longer applies or the data is no longer required for the purpose. This means that we store your personal data only for as long as is necessary for the respective processing purpose and limit the storage period to the necessary minimum. In addition, we store your data only if we are legally permitted or obliged to do so under statutory retention periods.

D. YOUR DATA SUBJECT RIGHTS

You have the right to:

+ access pursuant to Art. 15 GDPR,
+ rectification pursuant to Art. 16 GDPR,
+ erasure pursuant to Art. 17 GDPR,
+ restriction of processing pursuant to Art. 18 GDPR,
+ objection pursuant to Art. 21 GDPR (see below for the right to object), and
+ data portability pursuant to Art. 20 GDPR.

In addition, you may revoke at any time any consent you have given to the processing of personal data. The revocation may be made via the contact options described in this Privacy Policy. Please note that the revocation only takes effect for the future. Processing carried out before the revocation is not affected.

Furthermore, you have the right to lodge a complaint with the data protection supervisory authority pursuant to Art. 77 GDPR.

E. RIGHT TO OBJECT

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data which is carried out on the basis of Art. 6 para. 1 sentence 1 lit. e or f GDPR; this also applies to profiling based on these provisions within the meaning of Art. 4 para. 4 GDPR.

In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

The objection may be made via the contact options described in this Privacy Policy.

F. DATA PROCESSING WHEN ACCESSING LINKED CONTENT

This website may contain external links or hyperlinks to websites of other providers. These must be distinguished from our own content. These external contents do not originate from us, and we have no influence over the content of third-party sites. If you are redirected via links on the website to other sites, please inform yourself there about the respective handling of your data.

G. AUTOMATED DECISION-MAKING / PROFILING

Automated decision-making or profiling does not take place.

H. AMENDMENTS TO THIS PRIVACY POLICY

Due to the further development of our website and our online services or because of changes in statutory or regulatory requirements, it may become necessary to amend this Privacy Policy from time to time.

If you have any questions regarding the processing of your data, you may contact us at any time.

C. STORAGE AND DELETION OF DATA

D. YOUR DATA SUBJECT RIGHTS

E. RIGHT TO OBJECT

F. DATA PROCESSING WHEN ACCESSING LINKED CONTENT

G. AUTOMATED DECISION-MAKING / PROFILING

Automated decision-making or profiling does not take place.

H. AMENDMENTS TO THIS PRIVACY POLICY

Exit