Data Protection Declaration

General information on data processing

Responsible party: 

WDR mediagroup GmbH
Ludwigstraße 11
50667 Cologne
Email: info@hochhausdigital

WDR mediagroup GmbH (in the following, “we”/“us”) operates multiple services (in the following, “websites”) which can be accessed on the Internet, such as and 

In the following, we would like to inform you in a comprehensible and concise manner about the collection and processing of your data, as well as about your rights in this regard.

1. What data do we use?

We process personal data that we obtain from our customers or other data subjects in the context of our business relationship with these parties. In addition, we process—to the extent required to perform our services—personal data that we permissibly obtain from publicly accessible sources (e.g., press, Internet), or that is transmitted to us by other companies in the WDR mediagroup GmbH or by other third parties in an authorized manner.

2. What purposes do we use your data for, and on what legal basis? 

We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG)

a) to fulfill contractual obligations (Art. 6 (1) lit. b) GDPR)

Data is processed in order to fulfill contracts or carry out precontractual measures that are taken in response to your inquiry. 

b) on the basis of legitimate interest (Art. 6 (1) lit. f) GDPR)

To the extent required, your data is processed beyond the purposes stated above in order to safeguard legitimate interests: 

  • Improvement and further development of our offerings 
  • Advertising or market and opinion research, provided that you have not revoked your consent to the use of your data
  • Enforcement of legal claims, and defense in case of legal disputes
  • Guaranteeing the IT security and IT operation of the websites 
  • Measures for the security of our buildings and facilities (e.g., entry control) 
  • Measures for guaranteeing the right to determine who shall be allowed or denied access to premises 
  • Measures for business management and the further development of services and products

c) on the basis of your consent (Art. 6 (1) a) GDPR)

If you have consented to our processing of your personal data for certain purposes (e.g., newsletter distribution), this consent is the legal basis for data processing. You may revoke your consent at any time. To do so, please contact the address provided in section 7 below. 

This also applies to the revocation of declarations of consent which were submitted to us prior to the GDPR taking effect on May 25, 2018. The revocation of consent has effect only from the time the consent is revoked; it does not affect the legality of the processing of data before consent is revoked.

3. Who obtains your data?

In some cases, we contract with specialized service providers for the processing of your data. These companies receive from us only the personal data that they require for their specifically contracted activities. We carefully select and regularly monitor these service providers. They process the personal data provided by us only at our behest and strictly in accordance with our instructions, on the basis of corresponding contracts pertaining to the order processing.

4. Is your data processed outside the EU?

Your data is processed in part in countries outside the European Union (“EU”) or the European Economic Area (“EEA”), where data protection standards may generally be lower than in Europe. In such cases, we ensure, e.g., by contractual agreements with contracting partners, that an adequate data protection standard is guaranteed for your data, or we request that you provide your express consent to its transmission.

5. How long is your data stored?

We process and store your personal data for as long as this is necessary for fulfillment of contractual and/or legal obligations. 

Once the data is no longer required for fulfillment of contractual or legal obligations, it is routinely deleted, unless its—temporary—further processing is required for the following purposes:

  • Fulfillment of the obligation to preserve records in accordance with commercial and tax law following from, e.g., the German Commercial Code (Handelsgesetzbuch, HGB) and the General Fiscal Code (Abgabenordnung, AO). These laws generally prescribe periods of from two to ten years for the preservation or documentation of records.
  • Preservation of evidence in the framework of legal statutes of limitations. In accordance with Sections 195 ff. of the German Civil Code (Bürgerliches Gesetzbuch, BGB), these statutes of limitations may specify periods of up to 30 years, although the regular statute of limitations is set at three years.

6. What rights do you have?

At the addresses provided in section 7 below, you can request information on the personal data that we have stored about you. Under certain conditions, you can additionally request the amendment or deletion of your data. Furthermore, you have the right to the restriction of the processing of your data as well as the right to receive the data that you have provided in a structured, commonly used, and machine-readable format. 

For the processing of your data based on consent that you have provided, you may withdraw this consent at any time with effect for the future. Please direct your withdrawal of consent to the address provided in section 7 below.

For the processing of your data based on prevailing legitimate interest, you may withdraw your consent to this data processing if this is justified by your particular situation. Please direct your withdrawal of consent to the address provided in section 7 below.

Anyone concerned additionally has the right to submit a complaint to a regulatory authority if they are of the view that there is a violation of data protection regulations.

The regulatory official responsible for us is

Rundfunkdatenschutzbeauftragter (Broadcasting Data Protection Officer)
Dr. Reinhart Binder
Marlene-Dietrich-Allee 20
14482 Potsdam

7. How can you contact the data protection officer?

You can reach the data protection officer by post at the following address:

WDR mediagroup GmbH
Ludwigstraße 11
50667 Cologne

or by email at:

8. What data processing takes place on our website?

When a user visits our website, their data is processed in the following way:

For every website visit, data is collected on the time, duration, and extent of use of the pages visited, as well as about the computer/mobile device used, e.g., its operating system, region, and browser type.

The data is collected in pseudonymized form and used to generate anonymous information about how the website is used, to better adapt content to website users, or to make the website more user-friendly. The data is processed on the basis of Section 15 of the German Telemedia Act (Telemediengesetz, TMG). This processing includes the transmission of pseudonymized data to states outside the EU (in particular, the USA).

This website uses a cookie that is stored on your computer/mobile device. The WordPress plug-in “wpfilebase” sets a cookie with the value “1.”

You can prevent the installation of cookies by means of the corresponding browser setting. Please be aware, however, that by preventing the installation of cookies, you may not be able to use all functions of our website to the full extent.

Google Analytics:          

The website uses Google Analytics, a web analysis service from Google.

We commission Google to analyze the use of this website. We employ cookies, among other things, to enable this analysis. The data that Google collects about the use of the website (e.g., the referring URL, pages visited, web browser used, language settings, operating system used, and screen resolution) is transmitted to a Google server in the USA, where it is stored and analyzed. The results are then provided to us in anonymized form. 

In this process, your usage data is not associated with your full IP address. On this website, we have activated the IP anonymizing function offered by Google, in which the last octet (type IPv4) or the last 80 bits (type IPv6) of your IP address are deleted.

You may revoke your consent to web analysis at any time, either by downloading and installing the browser plug-in provided by Google or by clicking here. Web analysis is prevented only so long as you use a browser on which you have installed the plug-in or as long as you do not delete the opt-out cookie, respectively. Please remember that if you have selected “Delete all cookies” in your browser settings, you must individually re-set the opt-out cookie. 

You will find further information on Google Analytics in the Google Analytics Terms of Service, in the Google Analytics privacy and security principles, and in the Google Privacy Policy.

Social media plug-ins

Our websites use plug-ins from social media platforms (Facebook, Twitter, Instagram, XING, LinkedIn, and YouTube).

When you visit our websites while simultaneously logged in to your account on a particular social media network, the information that you have visited our website from your IP address is shared with the social network via the respective plug-in. Furthermore, content from our website may be linked to your profile on the respective social media network.

Please note that we, as the host of the websites, are not definitively informed as to the content of the data that is transmitted to, or as to its use by, the respective social media platform.

If you do not want your visit to our websites to be associated with your respective social media user account, please log out of your respective user account.

The plug-ins described here are used on the basis of Art. 6 (1) lit. f) GDPR. We as the website operator have a legitimate interest in our websites being as broadly visible as possible.

You will find further information in the data privacy statements of the respective operators to which we provide links here: Facebook, Twitter, Instagram, XING, LinkedIn, YouTube.

Contact form

When a user contacts us via the contact form on our website, the information they provide is used in processing the contact request in accordance with Art. 6 (1) lit. b) GDPR. The user data can be stored in a customer relationship management (CRM) system or comparable system for handling user queries.

When they are no longer needed, user queries are deleted. We review their necessity every two years; legal archiving obligations additionally apply.

As of: May 25, 2018