Data protection

Data protection

1. Data protection at a glance

General remarks

The following remarks will give you a simple overview of what will happen with your personal data when you visit this website. Personal data are any data by the means of which you can personally be identified. You will find detailed information about the topic of data protection in our Privacy Statement below.

Data collection on this website

  • Who is responsible for data collection on this website?
    The operator of this website is processing the data on this website. You will find the operator’s contact details in the paragraph "Information about the controller" of this Privacy Statement.
  • How do we collect your data?
    One way of collecting your data is by receiving the data that you provide to us. This might be data that you enter in a contact form.
    Other data will be collected – automatically or after your prior consent – by our IT systems when you visit our website. These are mainly technical data (e.g. information about internet browser, operating system or time of calling up the website). The data are collected automatically as soon as you enter our website.
  • What do we use your data for?
    Part of the data is collected to guarantee that the website is running smoothly. Other data might be used to analyse user behaviour.
  • What rights do you have regarding your data?
    You have the right to inquire, free of charge, about the origin, recipient and purpose of your personal data stored with us. Furthermore, you have the right to demand the rectification or erasure of your data. After consenting to our processing of your data you are entitled to revoke your consent for the future at any time. Moreover, you have the right to request, in certain circumstances, the restriction of process of your personal data. In addition to that, you have the right to lodge a complaint with the supervisory authority in charge.

If you have further questions regarding data protection, please do not hesitate to contact us anytime.

2. External hosting

This website is hosted by an external service provider (host). The personal data collected on this website are saved on the host’s server. This might be IP addresses, contact requests, meta and communication data, contract data, contact data, names, website access and other data generated by a website.

The host has been assigned to ensure our on-line services are provided securely, rapidly and efficiently by a professional service provider (Art. 6, sect. 1 f GDPR) in order to fulfil our contractual duties vis-à-vis our potential and existing customers (Art. 6, sect. 1 b GDPR).

Our host will only process the data to the extent to which he is required to fulfil his contractual duties. He will follow our instructions as regards these data.


We have commissioned the following host:
rive IT - Consulting & Solutions
A business unit of rivestidente GmbH | An der Reeperbahn 10 | 28217 Bremen


Conclusion of a contract via order processing
To guarantee data processing in compliance with GDPR we have concluded a contract on order processing with our host.

3. General remarks and mandatory information

Data protection

The operators of these web pages take the protection of your personal data very seriously. We are handling your personal data confidentially and in compliance with the legal data protection regulations and this Privacy Statement.

When you use this website different kinds of personal data are collected. Personal data are any data by the means of which you can personally be identified. This Privacy Statement explains what data we collect and what we use them for. It also describes how and to what purpose the data are collected.

Please note that the transmission of data via the internet (i.e. e-mail communication) might bear security risks. Completely preventing third parties from accessing the data is not possible.


Information about the controller

The controller for data processing on this website is:

Brynne Middlemaas-Dry
Galileo GmbH
Fahrenheitstraße 19-25
28359 Bremen

T: +49 (0) 421 69 64 76-0
E: bremen@galileoresidenz.de

The controller is a natural or legal person, who, alone or together with others, makes decisions on the purpose and means of processing personal data (e.g. names, e-mail addresses, etc.).


Duration of data storage

If no duration of data storage is specified in this Privacy Statement, your personal data will remain with us until the purpose of data processing ceases to exist. Should you make a justified request to delete the data or revoke your consent to data processing, your data will immediately be deleted unless there are other legally permitted reasons why we should store your personal data (e.g. tax-related or commercial safekeeping periods). In the latter case, the data will be deleted as soon as these reasons cease to exist.


Revocation of your consent to data processing

In many cases, data processing is only possible with your express consent. You can revoke your consent at any time. The lawfulness of the data processing activity carried out before the revocation remains unaffected.


Right to object to data collection on grounds of particular situation and right to object to direct marketing (Art. 21 GDPR)

IN CASE YOUR DATA ARE PROCESSED ON THE BASIS OF ART. 6 SEC. 1 SENTENCE E OR F GDPR YOU ARE ENTITLED TO OBJECT TO ITS PROCESSING FOR REASONS RELATED TO YOUR PARTICULAR SITUATION AT ANY TIME; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. YOU WILL FIND THE LEGAL BASIS OF DATA PROCESSING IN THIS PRIVACY STATEMENT. IF YOU OBJECT, WE WILL NO LONGER PROCESSES YOUR PERSONAL DATA CONCERNED UNLESS WE CAN PROVE COGENT REASONS WORTHY OF PROTECTION WHICH OUTWEIGH YOUR INTERESTS, RICHTS AND FREEDOMS OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION ACC. TO ART. 21 SEC. 1 GDPR).

WHERE PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO PROCESSING OF THE PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING, WHICH INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES (OBJECTION ACC. TO ART.  21 SEC. 2 GDPR).


Right to lodge a complaint with a supervisory authority

In case of violations, the data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint is valid without prejudice to any other administrative or judicial remedy.


Right to data portability

You have the right to receive the personal data, which we process in an automated fashion on the basis of your consent or fulfilling a contract, in a commonly used and machine-readable format. Should you request the direct portability of the data to another controller it will only be done if it is technically feasible.


SSL and/or TLS encryption

This website uses SSL and/or TSL encryption for security reasons and to protection the transmission of confidential content such as orders or requests that you send to the website's operator. You can recognize an encrypted connection when you see that the address bar of your browser changes from “http://” to “https://” and when the lock symbol appears in your address bar.

When the SSL and/or TSL encryption is activated the data that you transfer to us cannot be read by third parties.


Information, erasure and rectification

Within the framework of the applicable legal regulations, you have the right to receive information, free of charge, about your stored personal data, its origin and recipient and the purpose of data processing and, if applicable, you have the right to rectification or erasure of these data. If you have further questions regarding personal data, please do not hesitate to contact us anytime.


Right to restriction of processing

You have the right to request the restriction of processing of your personal data. To do so, you can contact us anytime. The right to restriction of processing applies in the following cases:

  • If you contest the accuracy of the personal data stored with us, we usually need time to verify it. You have the right to request the restriction of processing of your personal data for the duration of the verification.
  • If the processing of your personal data was/is unlawful, you can request the restriction of processing instead of the deletions of your data.
  • When we no longer need to use your personal data, yet only require them for the exercise, defence or establishment of legal claims, you have the right to request the restriction of processing of your personal data instead of its erasure.
  • If you have lodged an objection according to Art. 21 sect 1 GDPR, your and our interest must be weighed against each other. You have the right to request the restriction of processing of your personal data as long as it has not been determined whose interest prevails.

Where you have restricted the processing of your personal data, such data – with the exception of storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

4. Data collection on this website

Server log files

The provider of the web pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

  • Type and version of browser
  • Operating system used
  • Referring URL
  • Host name of accessing computer
  • Time of server inquiry
  • IP address

These data are not merged with other data sources.

The data collection is done on the basis of Art. 6 sect. 1 f GDPR. The website operator has a justified interest in a technically flawless presentation and optimisation of his website. For this purpose, server log files have to be collected.


Contact form

When you send us an inquiry through the contact form, your data from the inquiry form including any contact data provided by you will be stored by us in order to process your inquiry and to answer follow-up questions. We will not forward these data without your consent.

These data are processed on the basis of Art. 6 sec. 1 b GDPR if your inquiry is related to the fulfilment of a contract or required for the implementation of pre-contractual measures. In all other cases, processing is based on our justified interest in effectively processing inquiries directed to us (Art. 6 sec. 1 f GDPR) or on your consent (Art. 6 sec. 1 a GDPR) in case it was requested.

The data you have inserted in the contact form will remain with us until you request the erasure of the data, you revoke your consent to its storage or the purpose of the data storage ceases to exist (e.g. after your inquiry has been processed). Cogent legal provisions – particularly safekeeping periods – will remain unaffected.


Inquiries by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your inquiry including the personal data it contains (name, request) will be stored and processed by us for the purpose of handling your request. We will not forward these data without your consent.

These data are processed on the basis of Art. 6 sec. 1 b GDPR if your inquiry is related to the fulfilment of a contract or required for the implementation of pre-contractual measures. In all other cases, processing is based on our justified interest in effectively processing inquiries directed to us (Art. 6 sec. 1 f GDPR) or on your consent (Art. 6 sec. 1 a GDPR) in case it was requested.

The data you have sent us in your inquiry will remain with us until you request the erasure of the data, you revoke your consent to its storage or the purpose of the data storage ceases to exist (e.g. after your inquiry has been processed). Cogent legal provisions – particularly legally required safekeeping periods – will remain unaffected.