Source: https://www.aengevelt.com/en/privacy-notice/privacy-notice-website.html
Timestamp: 2019-04-25 00:03:21+00:00

Document:
This Privacy Notice applies to the collection, processing, and use of your personal data when visiting our website www.aengevelt.com.
Below, we would like to inform you about the type of data we collect, process, and use and for which purposes we do so as well as which rights you are entitled to in this context.
3. Which data from which sources do we process?
We process personal data that you provide us with on a voluntary basis or which are collected when using our website.
Please see section II – Processing of personal data for more information.
4. For which purpose do we process your personal data and what are the legal bases for processing?
We process your personal data in accordance with the pertinent data protection regulations for various purposes. In general, the following purposes of processing are conceivable: Processing for compliance with contractual obligations (Art. 6 clause 1 letter b GDPR), to protect justified interests (Art. 6 clause 1 letter f GDPR), based on your consent (Art. 6 clause 1 letter a GDPR) and/or based on legal obligations (Art. 6 clause 1 letter c GDPR).
We do not disclose your data to third parties who process data subject to their own responsibility (so-called data controllers, see Art. 4 no. 7 GDPR).
We only process your personal data for as long as is required for the respective purpose of processing.
Beyond that, we are subject to various retention and documentation obligations, resulting, amongst others, from the Handelsgesetzbuch (HGB) [German Commercial Code], the Abgabenordnung (AO) [Tax Code], and the Makler- und Bauträgerverordnung (MaBV) [Estate Agent and Property Developer Regulation]. These periods may be up to 10 years.
Finally, the storage period also depends on the statutory statute of limitations, which may, for example, amount to up to thirty years in terms of sections 195 et seqq. Bürgerliches Gesetzbuch (BGB) [German Civil Code], with the regular limitation period being three years.
Each data subject has the right to information under Art. 15 GDPR, the right to correction under Art. 16 GDPR, the right to deletion under Art. 17 GDPR, the right to limitation of processing under Art. 18 GDPR as well as the right to data transferability under Art. 20 GDPR. In order to exercise the above rights, you can contact the entities set out in clause one of Section I – General information.
Additionally, you have a right to objection which is specified in further detail at the end of this privacy notice.
For the purpose of structuring your visit on our websites in an attractive manner and for enabling you to use certain functions, we make use of what is referred to as “cookies” on certain websites. These cookies are small text files which will be stored on your end device. The cookies can be transmitted to these when accessing a website and thus allow for identification of the user. Cookies help to make the use of websites easier for users. Some of these cookies will be deleted again at the end of the respective browser session, i.e. after you closed the browser window (this type of cookies is referred to as “session cookies”). Other cookies remain on your end device and enable us to recognise your browser whenever you visit our websites again (also referred to as “persistent cookies“).
You have the possibility to change your browser settings so that you will be informed in the case any cookies are set and you may individually decide whether or not to accept any cookies or generally exclude any cookies to be saved. You can delete cookies that were already placed. In the case where you opt for rejecting any cookies, the functionalities on our website may be restricted.
* description of the type of the web browser used.
The personal data in logfiles are processed based on Article 6 clause 1 letter f GDPR. The purpose of processing and our justified interest are easier administration of our website and the opportunity to recognise and track hacking.
This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics makes use of what is referred to as “cookies”, small text files which are saved on your computer and which allow for any analysis of the manner in which you use our website. As a general rule, any information as to the use of this website generated by such cookies is transferred to a server based in the United States where it will be stored.
If IP anonymisation is activated on this website, Google is going to shorten your IP address within a member State of the European Union or any other contracting state of the European Economic Area prior to transferring it to the United States. Only in exceptional cases Google will transfer the entire IP address to a server based in the United States and shorten the address there. IP anonymisation is activated on this website.
On behalf of the website operator, Google will use this information for evaluating the use of the website by you, to prepare website activities reports and to provide any additional services for the website operator in relation to the use of both the website and the internet in general. Any IP addresses transferred through browsers within the framework of Google Analytics will not be combined with any other data collected by Google.
You have the right to object to cookies being saved on your computer by changing the respective browser software settings; however, we would like to point out that this may result in certain functions of this website being restricted so that you cannot use them to the full extent. In addition to the above, you also have the right to prevent any data generated by the cookies and relating to the use of the website (including your IP address) from being transferred to Google and you may prevent these data from being processed by Google by downloading and installing the browser plug-in which is http://tools.google.com/dlpage/gaoptout?hl=de available at the following address.
You can prevent recording by Google Analytics on our website by clicking on the link.
For further information on the general terms and conditions of use and on data protection, please visit http://www.google.com/analytics/terms/de.html or www.google.com/intl/de/analytics/privacyoverview.html.
We base the processing of personal data by Google Analytics on Article 6 clause 1 letter f GDPR. The purpose of data processing and our justified interest is the analysis of use of our website.
This website uses the Google product Google Maps. By visiting a subpage that contains Google Maps, Google receives the information that you have accessed the corresponding subpage on our website. Additionally, data are collected which your browser transmits to Google. This includes, for example, IP address, date and time of the request, the amount of data transferred each time, operating system and its interface, language and version of the browser software.
This takes place irrespective of whether Google provides a user account via which you are logged in or whether you do not have a user account. If you are logged into Google, your data are directly linked to your account. If you do not wish for a link to your profile with Google, you have to log out before clicking the button. Google saves your data as user profiles and utilises them for advertisement or market research purposes and/or tailored design of its website. In order to exercise any rights, such as a right of objection to the creation of these user profiles, you have to contact Google.
By using Google Maps, you agree to the Google Maps terms and conditions. You can find the Google Maps terms and conditions here: Terms and conditions of Google Maps. For further information regarding the processing of your personal data by Google Inc., please see the Google Privacy Notice; it can be found here: Privacy Notice of Google. Google also processes your personal data in the USA and has committed to the EU-US Privacy Shield.
You can find various contact forms on our website, which you may use for contacting us electronically. Alternatively, you can request us to call you back using a separate contact form. Alternatively, you can use the e-mail address provided for contacting us. If you use one of these channels to contact us, we will process the personal data you enter and transmit to us.
In case of using a contact form, the personal data that are processed consist of the core data entered there (surname, first name, title, e-mail address) and any additional personal data you may have entered in the field “message”. If you contact us directly using e-mail, we record your e-mail address as well as any personal data that may be disclosed in the text of the e-mail.
If you use the contact form to request us to call you back, we will also collect the data you have entered into and transmitted via the entry mask. This includes name, phone number and if applicable – should you decide to provide this information additionally – the company you work for and the topic of your callback request. Processing takes place pursuant to Article 6 clause 1 letter f GDPR. Purpose of data processing and our justified interest are customer care and the ability to reply to messages addressed to us.
Via various other contact forms, you have the opportunity to request us to act as estate agent (https://www.aengevelt.com/en/immobilien.html). For this purpose, there are separate forms each for Purchase, Sale, Leasing, and Letting.
If you use the contact form to request estate agent services, we collect all information concerning the object of such services and your core data that were entered into the respective fields. These consist of surname, first name, title, e-mail address as well as, if applicable – should you decide to provide this information additionally – address and phone number.
Additionally, there are separate contact forms for each exposé. Again, you core data and all personal data that are contained in the field “Your message” will be collected. Additionally, we will link your request to the corresponding exposé.
We process the transmitted personal data based on Article 6 clause 1 letter b GDPR. The sole purpose of processing are the actual processing of your request, contacting you, and provision of our real estate services for you.
Our website offers you the option to create a user profile (https://www.aengevelt.com/en/login.html). Registration is required for the provision of content, especially the download of market reports.
As part of the registration, we collect the following personal data in the entry mask: Name, address, e-mail address and, if applicable – should you decide to provide this information additionally – title, fax and phone number as well as the company you work for. If you download content from our website, we will process the information as to which content you download.
We process the transmitted personal data based on Article 6 clause 1 letter f GDPR. The purpose and our justified interest are the analysis of the use of our website, especially demand for our real estate data.
If you create a user profile, you are given the option to receive further information based on the market reports you downloaded. These will provide you with information regarding the market relevant for you as well as with information regarding our scope of services.
We process the following personal data in this respect: Name, address, e-mail address and, if applicable – should you decide to provide this information additionally upon registration – title, fax and phone number, the company you work for as well as the content you downloaded from our website. Based on your downloads, we will send you information tailored to your interests. Please see the declaration of consent for more information regarding recording of downloads and personalisation of advertisement.
We process the personal data based on Article 6 clause 1 a GDPR. The purposes are customer retention and direct advertising.
We use data rooms in which we offer our customers and interested parties various project-based documents for downloading. These include, for example, property documents or contractual documents. Only users activated for the project will be given access.
As part of access control, we process the following personal data in this respect: e-mail address, name.
Processing of personal data is based on Article 6 clause 1 letter f GDPR. The purpose and our legitimate interest are the initiation of contracts, provision of project-relevant documents, and the prevention of unauthorised access to the uploaded documents.
The most recent revision of this Privacy Notice took place in May 2018.

References: Art. 4
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 20