Privacy Policy
Privacy
Policy
I. General information about personal data and contact information of the controller
The protection of your personal data is important for us.
Below we would like to inform you about the handling of personal data. According to Article 4 No. 1 of Regulation (EU) 2016/679 (hereinafter referred to as "General Data Protection Regulation" or "GDPR" for short), personal data is all information that relates to an identified or identifiable natural person. Your data will be stored and processed by us in compliance with the relevant provisions of national data protection laws and the General Data Protection Regulation (GDPR).
Responsible for data processing within the meaning of the aforementioned regulations is:
Immobilienwelt Rehage & Partner GmbH
Südliche Hauptstraße 7,
D-83700 Rottach-Egern
E-Mail: info@immobilienwelt.com
Website: https://immobilienwelt.com
Fon: +49 8022 – 240 81
Fax: +49 8022 – 67 00 07
The person responsible for the processing of personal data (controller) is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
II. Your Rights
Regarding the personal data concerning you, you have the following rights vis-à-vis the controler. Regarding the requirements for exercising these rights, reference is made to the respective legal basis:
- Right to information in accordance with Article 15 GDPR;
- Right to rectification according to Article 16 GDPR;
- Right to erasure according to Article 17 GDPR;
- Right to restriction of processing in accordance with Article 18 GDPR;
- Right to information according to Article 19 GDPR;
- Right to data portability according to Article 20 GDPR;
- Right to revoke granted consent in accordance with Article 7 (3) GDPR;
- Right to complain according to Article 77 GDPR.
Moreover, you have the right to object:
Data subjects have the right, for reasons arising from their particular situation, to object at any time to the processing of their personal data, which is based on Article 6 paragraph 1 subp. e or f of GDPR.
The controller no longer processes the personal data concerned, unless they can demonstrate compelling legitimate grounds for processing that outweigh the interests of the data subject, their rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data concerned is processed to operate direct advertising, the persons concerned have the right to object at any time to the processing of the personal data concerning them for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
If data subjects object to the processing for direct marketing purposes, the personal data relating to them will no longer be processed for these purposes.
Data subjects have the option, in connection with the use of information society services- notwithstanding Directive 2002/58/EC - to exercise their right to object by automated means using technical specifications.
III. Legal Bases
If we obtain the consent of the person concerned for the processing of personal data, Article 6 paragraph 1 subp. a of GDPR serves as the legal basis.
Sofern die Verarbeitung von personenbezogenen Daten zur Erfüllung der mit uns geschlossenen Verträge erfolgt, dient Art. 6 Abs. 1 lit. b DSGVO als Rechtsgrundlage. Dies gilt auch für Verarbeitungsvorgänge, die zur Durchführung vorvertraglicher Maßnahmen erforderlich sind.
If the processing of personal data takes place to fulfill the contracts concluded with us, Article 6 paragraph 1 subp. b of GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 Paragraph 1 subp. c of GDPR serves as the legal basis. If vital interests of the data subject or another natural person require the processing of personal data, Article 6 Paragraph 1 subp. d of GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the first interest, Article 6 paragraph 1 subp. f of GDPR serves as the legal basis for the processing.
If reference is made below to the fact that data is processed in the USA, we would like to point out that the European Court of Justice has assessed the level of data protection in the USA as insufficient. In particular, there is a risk that your data will be processed by US authorities for control and monitoring purposes without the possibility of legal remedies. If you have consented to the use of the respective service, you consent to your data being processed in the USA in accordance with Article 49 Paragraph 1 Sentence 1 subp. a of GDPR.
If cookies or similar technologies are used, we will obtain prior consent (Art. 25 of TTDSG (Telecommunications Telemedia Data Protection Act)), unless this is not required by law. In particular, consent is not necessary if the storage and reading of the information, including cookies, is absolutely necessary in order to provide the users with a telemedia service (i.e. our online offer) that they have expressly requested. The revocable consent is clearly communicated to the users and contains the information on the respective cookie use.
IV. Duration of storage of personal data
The respective storage period of personal data depends on the legal basis, the purpose of the processing and, if applicable, relevant statutory storage obligations.
The following applies in principle:
If the data is processed on the basis of consent within the meaning of Article 6 Paragraph 1 subp. A of GDPR, the data will be stored until the consent is revoked.
If the data is processed on the basis of Article 6 Paragraph 1 subp. f of GDPR, this data will be stored until the data subject exercises his right of objection under Article 21 Paragraph 1 of GDPR, unless there are compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct advertising on the basis of Article 6 Paragraph 1 Subp. f of GDPR, personal data will be stored until the person concerned exercises their right of objection under Article 21 Paragraph 2 of GDPR.
Unless otherwise stated in the following information in this declaration on specific processing situations, personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.
V. Processing Situations in Detail
1. Processing of personal data when visiting the website
a. Description and scope of data processing
When you visit our website (without registering or otherwise contacting us), the following data (so-called log files) are transmitted to our server by your browser:
- IP address
- Date and time of the request
- Time zone difference to GMT
- Content of the website
- Access Status (HTTP Status)
- Amount of data transferred
- Request - website
- Web browser
- Operating system
- Browser language and version
b. Legal Basis for Data Processing
The legal basis for storing the data and log files is Article 6 Paragraph 1 Subp. f of GDPR.
c. Purpose of the data processing
Storage in log files ensures that our website works properly. It also serves to optimize and ensure the security of our systems. An evaluation of the data for marketing purposes does not take place in this context.
d. Duration of storage
The data stored by us will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is usually the case after the end of the respective session.
An Additional storage is possible. In this case, the IP addresses of the users are deleted or alienated so that it is no longer possible to assign the calling client.
e. Objection and elimination options
The collection of the mentioned data is absolutely mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
2. Processing of personal data through cookies
a. Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored on the visitor's computer system when our website is accessed. Cookies contain a character string that enables the visitor's browser to be identified when our website is accessed again.
We use the following types of cookies:
- Transient cookies/session cookies: Are deleted after the session ends
- Persistent cookies: Are deleted after the specified storage period
- Technically required cookies
Insofar as cookies are also set on our websites for advertising and/or analysis purposes, we will inform you about this separately in this declaration.
You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be restricted.
b. Legal Basis for Data Processing
The legal basis for the processing of personal data using necessary cookies is Article 6 Paragraph 1 Subp. f of GDPR.
c. Purpose of the data processing
Technically required cookies serve to simplify the use of websites. Some functions of the website or the online shop cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized again after a page change.
The user data collected through technically necessary cookies are not used to create user profiles.
d. Duration of storage, possibility of objection and removal
Cookies are stored on the user's computer and transmitted by it. Therefore, users also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.
3. Contact Form and Email
a. Description and scope of data processing
We provide visitors to our website with a contact form for quick, electronic contact. The data entered in the input mask will be transmitted to us and saved.
If you contact us via the contact form or by e-mail, you agree to e-mail communication that is encrypted for transport but not encrypted. Please inform yourself about the associated risks, e.g. here: https://www.bsi-fuer-buerger.de.
In addition, the IP address of the user as well as the date and time of transmission are stored at the time of sending.
Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted with the e-mail will be stored.
There is no transfer of the data to third parties. The data will only be used to process the request.
b. Legal Basis for Data Processing
The legal basis for processing the data is Article 6 Paragraph 1 Subp. a of GDPR.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Article 6 Paragraph 1 Subp. f of of GDPR. If the e-mail contact is aimed at concluding a contract, the legal basis for processing is Article 6 Paragraph 1 subp. b of GDPR.
c. Purpose of the data processing
The processing of the personal data serves solely to process the establishment of contact. If contact is made by e-mail, this is also the necessary legitimate interest in the processing of the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
d. Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is over when it can be inferred from the circumstances that the facts in question have been finally clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
If the correspondence results in a business transaction, we are legally obliged to keep the exchanged correspondence for 6 years (beginning at the end of the calendar year in which the respective letter was sent).
e. Objection and elimination options
The user has the option to revoke his consent to the processing of personal data at any time. For this purpose, the user can contact the controller via the contact options provided on the website. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
If the storage of the data is from a legal obligation, there is no right of objection.
4. Newsletter
a. Description and scope of data processing
Users have the option of subscribing to our newsletter on our website. When registering for the newsletter, the data requested from the input mask is transmitted to us.
In addition, the following data is collected during registration:
• IP address of the user's computer
• Date and time of registration
As part of the registration process, consent is obtained using a so-called double opt-in procedure.
If customers have purchased goods or services from us and have deposited their e-mail address, this can subsequently also be used to send a newsletter. In such a case, only direct advertising for your own similar goods or services will be sent via the newsletter.
b. Legal Basis for Data Processing
The legal basis for the processing of the data after the user has registered for the newsletter is Article 6 Paragraph 1 Subp. a of the GDPR if the user has given their consent.
The legal basis for sending the newsletter as a result of the sale of goods or services is Article 7 Paragraph 3 of the UWG/ Unfair Competition.
c. Purpose of the data processing
The collection of the user's e-mail address serves to deliver the newsletter.
The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used.
d. Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The user's e-mail address is therefore stored for as long as the subscription to the newsletter is active.
e. Objection and elimination options
The subscription to the newsletter can be canceled by the user concerned at any time. For this purpose, there is a corresponding link in every newsletter.
5. Brevo
a. Description and scope of data processing
For sending the newsletter and for email marketing purposes, we use the newsletter service Brevo. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin.
The provider stores the data entered during registration, at least your e-mail address.
Furthermore, the IP address assigned during registration, as well as the date and time of registration are stored.
Furthermore, information on click behavior after receipt of the newsletter is collected and stored.
Legal Basis for Data Processing
The legal basis for the processing of the data after the user has registered for the newsletter is Article 6 Paragraph 1 Subp. a of the GDPR if the user has given their consent.
c. Purpose of the data processing
Through the aforementioned data processing, we obtain information that allows us to analyze the behavior of users. This enables us to optimize our newsletters and improve their display.
d. Duration of storage
Your data will be deleted when it is no longer required for our business processes and there are no statutory retention obligations to the contrary. We have no influence on the storage of data by the provider. You can reach the provider under the above contact details.
Objection and elimination options
Users may withdraw their consent to the processing of personal data at any time from the controller. For this purpose, the user must contact the controller via the communication channels provided. The latter may also arrange for the deletion of the data from the provider.