• Properties

Privacy

Thank you for your interest in MOMENI Holding GmbH. The protection of personal data is a key concern for us, and we take it very seriously. In principle, our website can be used without providing any personal data. However, certain services on our website may require the processing of personal data. Where the processing of personal data is necessary, there is either a legal basis for it or we obtain your consent. In doing so, we comply with the provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

With this privacy policy, MOMENI Holding GmbH wishes to inform you about the nature, scope and purpose of the personal data processed and to fulfil its transparency obligations, in particular by explaining the rights of data subjects.

1. Contact details of the controller and the data protection officer

Controller:

MOMENI Holding GmbH
Kaiser-Wilhelm-Straße 14, 20355 Hamburg, Germany
Phone: +49 40 411 667-700
Email: datenschutz@momeni-group.com
Website: https://momeni-group.com/en/

Data protection officer:
esatus AG
Phone: +49 6103 9029-0
Email: dsb@esatus.com

2. Data processing

2.1. General information (server log data)

Our log files automatically store information that your browser transmits when you access our website. This includes:

  • Time and date of the server request

  • Referrer URL (URL of the previously visited website)

  • Files requested or transferred

  • Amount of data transferred

  • Browser type and version

  • Operating system

  • IP address of the accessing device

This data is used for the statistical evaluation of website usage as well as for optimisation and security purposes, e.g. to combat abuse through automated mass access (legitimate interest pursuant to Art. 6(1)(f) GDPR). We do not attribute this data to specific individuals. This data is not combined with other data or data sources. The IP addresses are stored in anonymised form. The log data is deleted after 7 days at the latest unless it is required for longer in order to investigate a specific security incident.

2.2. Cookies

We use cookies on our website. Cookies are small data packets that are stored on your device and can be managed by you. Cookies enable, for example, faster navigation. You can delete cookies at any time or prevent the use of cookies altogether. Please note, however, that you may not be able to use our website to its full extent without cookies. We use technically necessary cookies on the basis of Section 25(2) No. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. We only use cookies and similar technologies for analysis purposes (etracker, see section 2.3) with your consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. Your selection in the cookie banner is stored in the technically necessary cookie “COOKIE_CONSENT” for 365 days. You can withdraw or adjust your consent at any time with effect for the future via the “Cookie settings” link at the bottom of every page.

2.3. etracker

To analyse the use of this website, we use the etracker Analytics service provided by etracker GmbH (Erste Brunnenstraße 1, 20459 Hamburg, Germany). In particular, the pages visited, the time spent on them, the previously visited page (referrer) and information about the browser, operating system and device are recorded. Your IP address is shortened or anonymised by etracker as early as possible. The analyses serve to design and optimise our website in line with users’ needs.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you give via our cookie banner and can withdraw at any time with effect for the future. etracker is only loaded after you have given your consent.

etracker processes the data on our behalf exclusively in Germany; a data processing agreement pursuant to Art. 28 GDPR has been concluded with etracker. The data is deleted after 13 months. Further information on data protection at etracker is available at https://www.etracker.com/en/data-protection-by-etracker/

2.4. Provision of the app for visitor and booking management

The purpose of the app is to manage visitors, bookings/occupancy and notifications (e.g. tasks for facility management).

Downloading the app from the Apple App Store or Google Play Store

Insofar as personal data is processed on your mobile device when downloading the app from the Apple App Store or Google Play Store, we have no influence on this data processing. MOMENI does not process any data in this context. For information on the processing of your personal data when using the store, please refer to the privacy policy of the respective operator.

The Apple App Store and the Google Play Store provide MOMENI with information on completed downloads via their customer area. This is anonymised data that is provided exclusively for statistical purposes. The information provided comprises the following data:

  • Manufacturer

  • Operating system version

  • App version

  • Device name

  • Country

The statistical data referred to above is provided to us by the app store operators exclusively in anonymised form. We have no influence on the collection and processing of this data, which is carried out by the app store you have chosen. In this respect, we are not the controller within the meaning of Art. 4(7) GDPR.

Google Play Store privacy policy: https://policies.google.com/privacy
Apple App Store privacy policy: https://www.apple.com/legal/privacy/

Use of the app
This app was developed by Equiem. When using this app, the following data is stored as mandatory information and is strictly necessary for the proper provision and use of the app: first and last name, email address, company name, IP address, activities on the platform (only in the case of support requests), geolocation. Sharing of geolocation is enabled because it is required by the access control SDKs contained in the app. The geolocation data is used exclusively to access the digital access control software or other location-based integrations (e.g. the parking integration). The location data is not stored by Equiem or MOMENI.

In addition, the following data is optional: role/title, address, access ID, skills and interests, vehicle registration number, profile picture, payment information.
For further information on the processing of your personal data when using the app, we would like to refer you, in addition to our privacy policy, to the privacy policy of the app developer Equiem. The link to the privacy policy can be found in the app and here: https://springer-quartier.web.getequiem.com/privacy
Only MOMENI and the contractors Equiem, Evergreen, the owner of the building and the facility management can access the data to varying degrees (in accordance with a user and authorisation concept). All companies involved comply with the requirements of the GDPR.

Use of the app is entirely voluntary. MOMENI only activates the respective tenant (company) using the email address on file and grants access to the relevant floors. The tenants’ employees must register independently via their employer. The legal basis for the processing of personal data in connection with the use of the app is Art. 6(1)(a) GDPR (consent), which is given by independently downloading the app, and Art. 6(1)(f) GDPR (legitimate interest). The duration of storage and the associated deletion of personal data are governed by the statutory requirements. Access to the data within the app is provided exclusively via dedicated authorisation management. Through this established authorisation management, the respective users have different levels of authorisation and visibility of the data. Data is not passed on to third parties other than contractors commissioned by MOMENI for the provision and operation of the app and the services for the Springer Quartier (e.g. facility management).

2.5. LinkedIn content (Apify)

We display content from our LinkedIn company page on our website. For this purpose, we use Apify Technologies s.r.o. (Na Příkopě 959/27, 110 00 Prague 1, Czech Republic) as a service provider. Apify retrieves the publicly available content on our behalf and makes it available to us for display. When you visit our website, no direct connection is established between your browser and LinkedIn’s servers. The content is stored on our own server and delivered from there; no data is transmitted to Apify or LinkedIn when you visit our website. The processing is based on our legitimate interest in an appealing presentation of our online presence (Art. 6(1)(f) GDPR). A data processing agreement pursuant to Art. 28 GDPR has been concluded with Apify. Insofar as Apify uses sub-processors outside the EU or EEA (in particular in the USA) to retrieve the content, the transfer is based on the adequacy decision for the EU-U.S. Data Privacy Framework (Art. 45 GDPR) or on the standard contractual clauses of the European Commission (Art. 46(2)(c) GDPR). The displayed posts may contain personal data of third parties (e.g. names and profile pictures of persons who have written or commented on posts). We only process such data to the extent that it is publicly visible on our LinkedIn company page, likewise on the basis of Art. 6(1)(f) GDPR. The content is updated regularly; posts that are no longer displayed on our website are deleted from our server. Further information can be found in Apify’s privacy policy: https://apify.com/privacy-policy

2.6. Vimeo

We embed videos from the provider Vimeo (Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA) on our website. For this purpose, we use a two-click solution (“click-to-load”). When the page is accessed, only a placeholder is displayed initially. No connection to Vimeo is established and no personal data is transmitted to Vimeo.

The video is only loaded once you actively confirm loading it via the placeholder. In doing so, the following data is transmitted to Vimeo:

  • IP address of the accessing device

  • Information about which of our pages you visited

  • Browser type and version as well as operating system

Vimeo may also set cookies. If you are logged in to Vimeo, the visit may be linked to your user account. Vimeo is itself responsible for the further processing of the transmitted data. The legal basis is your consent given by confirming via the placeholder (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw this consent at any time with effect for the future. Your consent only applies to the respective page view; when the page is accessed again, the video will only be loaded after renewed confirmation. You can delete cookies already set by Vimeo via your browser settings. Data is transferred to the USA on the basis of the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework (Art. 45 GDPR), under which Vimeo.com, Inc. is certified. Further information can be found in Vimeo’s privacy policy: https://vimeo.com/privacy

2.7. Contact via the website

If you contact MOMENI Holding GmbH by email, the personal data you voluntarily provide is automatically stored for the purpose of processing your enquiry or contacting you (Art. 6(1)(f) GDPR; if your enquiry is aimed at the conclusion or performance of a contract, the legal basis is Art. 6(1)(b) GDPR). The data is not passed on to third parties, with the exception of technical service providers we use (e.g. for email hosting) acting as processors.

2.8. Deletion and restriction of processing of personal data

If the purpose of processing ceases to apply or a statutory retention or archiving period expires, the personal data will be deleted or its processing restricted in accordance with the statutory provisions.

2.9. Storage period

The duration of storage of personal data depends on the respective statutory retention period and the purpose of processing. As soon as the statutory retention period expires or the purpose of processing ceases to apply, the personal data is deleted, unless it is required for the performance or initiation of a contract.

2.10. Recipients of personal data

The following recipients receive personal data via this website:

  • PlusServer GmbH (https://www.plusserver.com/), which operates the web hosting for this website. This only concerns personal data automatically provided by your browser (see section 2.1 of this privacy policy).

  • etracker GmbH as a processor for the analysis of website usage, provided you have given your consent (see section 2.3 of this privacy policy).

  • Apify Technologies s.r.o. as a service provider for the provision of LinkedIn content (see section 2.5 of this privacy policy).

  • Vimeo.com, Inc., provided you load a video by confirming via the placeholder (see section 2.6 of this privacy policy).

2.11. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar and by the padlock symbol.

3. Rights of data subjects

Data subjects can exercise all of the following rights at any time, e.g. by sending a request by email to datenschutz@momeni-group.com. We will process your request without undue delay and in any event within one month of receipt (Art. 12(3) GDPR).

3.1. Right to confirmation

Data subjects have the right to obtain confirmation as to whether personal data concerning them is being processed.

3.2. Right of access

Data subjects have the right to obtain information free of charge about the personal data concerning them and to receive a copy of it. In addition to the copy, the following information is provided:

  • Purposes of processing

  • Categories of personal data

  • Recipients or categories of recipients, in particular recipients in third countries or international organisations

  • Where possible, the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period

  • The existence of further data subject rights and of the right to lodge a complaint with a supervisory authority

  • The existence of automated decision-making, including profiling

Where the personal data has not been collected from the data subject, the data subject receives all available information as to its source.

If the data is also transferred to a third country or an international organisation, appropriate safeguards, such as the use of EU standard contractual clauses, will be communicated.

3.3. Right to rectification

Data subjects have the right to obtain the rectification of inaccurate personal data and, taking into account the purposes of the processing, the completion of incomplete data.

3.4. Right to erasure (right to be forgotten)

Data subjects have the right to obtain the erasure of personal data concerning them, which will be erased without undue delay upon request, provided that one of the following grounds applies and the processing is not necessary:

  • The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed

  • The data subject withdraws consent to the processing and there is no other legal ground for the processing

  • The data subject objects to the processing and there are no overriding legitimate grounds for the processing, or the data subject objects to direct marketing

  • The personal data has been unlawfully processed

  • The erasure of the data is required for compliance with a legal obligation

  • The personal data has been collected in relation to the offer of information society services pursuant to Art. 8(1) GDPR

Where MOMENI Holding GmbH has made the personal data of the data subject public and is obliged to erase it pursuant to Art. 17(1) GDPR, MOMENI Holding GmbH shall, taking account of available technology and the cost of implementation, take reasonable steps to inform other controllers processing the published personal data that the data subject has requested the erasure by such controllers of any links to, or copies of, that personal data, insofar as the processing is not necessary.

3.5. Right to restriction of processing

Data subjects have the right to obtain restriction of processing where one of the following applies:

  • The accuracy of the personal data is contested by the data subject (for a period enabling the controller to verify it)

  • The processing is unlawful, but the data subject opposes erasure and requests the restriction of its use instead

  • The controller no longer needs the data for the purposes of the processing, but the data subject requires it for the establishment, exercise or defence of legal claims

  • The data subject has objected to the processing and it has not yet been determined whether the legitimate grounds of the controller override the interests of the data subject

3.6. Right to data portability

Data subjects have the right to data portability. This right entitles data subjects to receive the personal data concerning them in a structured, commonly used and machine-readable format. The data subject therefore has the right to transmit this data to another controller or to have the data transmitted directly from one controller to another.

3.7. Right to object

The data subject may object to data processing carried out on the basis of a “legitimate interest” (Art. 6(1)(f) GDPR). As a result, we will no longer process the data unless the controller can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims. Where MOMENI Holding GmbH processes personal data for direct marketing purposes, you may object to this at any time.

3.8. Automated individual decision-making, including profiling

We do not use automated decision-making or profiling.

3.9. Right to withdraw consent

Data subjects have the right to withdraw their consent to processing at any time. This does not affect the lawfulness of processing carried out before the withdrawal.

3.10. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your data violates data protection law or that your data protection rights have been infringed in any way, you can lodge a complaint with the Hamburg Commissioner for Data Protection and Freedom of Information: https://datenschutz-hamburg.de/beschwerde/

Without prejudice to this, you may also contact any other data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).

Last updated: October 2026