‹ Back to Selfdesk Demo Space

Privacy

Who is responsible

Responsible for your data as a guest or member is:

Demo-Betreiber (Staging)
Hansastraße 66
24118 Kiel
Email: demo-admin@selfdesk.app

For bookings, contracts and invoices we use the Selfdesk software by Ausguck GmbH, Kiel. Ausguck GmbH processes your data only on our behalf and on our instructions (Art. 28 GDPR).

When you visit this page

This page is provided by Selfdesk. For what a visit involves technically, server logs and a visit count without cookies, Ausguck GmbH is responsible. Selfdesk's privacy policy describes this in section 4.

Membership

When you become a member, we store your plan, your start date and your billing address. Every contract step, signing, changing and cancelling, creates a contract document as a PDF. We store your consent to our contract documents with time, version, IP address and browser identifier so we can prove it.

We store your bookings with date, time and desk or room. They are the basis of the invoice you get once a month.

In Selfdesk we see your name, email address, plan and contract status, billing address, bookings, invoices and payment status. Other members see none of it.

To sign in you need a Selfdesk account. Ausguck GmbH is responsible for it itself, see Selfdesk's privacy policy, section 5.

The legal basis is your membership contract (Art. 6(1)(b) GDPR) and our legal duty to keep contracts and invoices (point c).

Doors

If you have door access, you open doors in the Selfdesk app or in the browser. Selfdesk then sends an open command to our Nuki lock system; Nuki does not learn who opens. We store every opening with door, time and result to keep the space secure and to find faults, not to check on your attendance. After 30 days we remove the link to you.

The legal basis is our legitimate interest in the security of our premises (Art. 6(1)(f) GDPR). You can object.

Messages

If you write to us through the messages in the app or in the browser, we store your messages, our replies and the thing it is about, such as an invoice, booking, payment or door. The app shows you before sending what goes along: your plan and, for a problem with the app, your device, the app version and the last error. Everyone who manages our space can read it. We may also write to you ourselves, for example about an invoice, a payment or an application; the same applies then. If the app does something wrong, we can forward the case to Selfdesk, which runs the app for us – without your name and the email address from your account. We may save a conversation as a PDF for our records.

The legal basis is your membership contract (Art. 6(1)(b) GDPR).

Withdrawal through this page

If you withdraw from a contract with us using “Withdraw from contract”, we store your name, your email address, your contract details, your note, the time of receipt and a hash of your IP address. Selfdesk receives the declaration on our behalf, sends you the confirmation of receipt and passes the declaration on to us.

So that nobody misuses the form automatically, Cloudflare Turnstile checks on sending, based on your IP address and browser characteristics, whether a person is writing.

The legal basis is our statutory duty to accept withdrawals online and confirm their receipt (Art. 6(1)(c) GDPR, § 356a BGB).

Who receives your data

Your data only goes to these services:

  • Ausguck GmbH, Kiel (Selfdesk): runs the software on our behalf, on servers in Germany. Which service providers Selfdesk uses for this is listed in Selfdesk's privacy policy, section 7.
  • Nuki Home Solutions GmbH, Graz: opens our doors and only receives the lock's identifier.
  • Cloudflare, Inc., San Francisco: protects the forms on this page (withdrawal, guest booking, questions) from automated submissions and may transfer data to the US, based on the EU-US Data Privacy Framework and standard contractual clauses.

We pass nothing on to anyone else unless the law requires us to.

How long we keep it

  • Invoices, receipts, contracts and the bookings behind them: eight years from the end of the calendar year, as German tax law requires (§ 147 AO, § 14b UStG).
  • Proof of your consent: as long as the contract. We delete the IP address and browser identifier in it after three years.
  • Door log: the link to you for 30 days.
  • Messages: two years after the last message in the conversation.
  • Withdrawals: three years after receipt.
  • Withdrawals: three years after receipt.
  • Everything else we delete as soon as we no longer need it for its purpose.

Your rights

You can ask for access to your data, for its correction, deletion or restriction, and to receive it in a common format. Where we rely on our legitimate interest, you can object. Write to demo-admin@selfdesk.app.

You can also complain to a data protection authority, for example the one in your state.