Source: https://www.geg.de/en/data-protection-policy.html
Timestamp: 2019-04-25 19:52:29+00:00

Document:
Thank you for visiting our websites. Below please find some information about how we handle your data under Art. 13 of the EU General Data Protection Regulation (GDPR).
The controller responsible for data collection and processing as outlined below can be found in the Legal Disclosure section.
the IP address of the computer sending the request, which is abbreviated in order to conceal personal identity.
The log data mentioned above is stored in anonymous form only.
We transfer your data to providers who process it on our behalf under Art. 28 GDPR in order to help us run our websites and the related processes. Our service providers are subject to our strict instructions and are contractually obligated to follow them. The name of our provider is: Host Europe GmbH, Google LLC.
Google Analytics (USA) has an adequate level of data protection due to its participation in the Privacy Shield (Art. 45 (1) GDPR).
Our websites use session cookies. Processing is based on Art. 6 (1) (1) f) GDPR and in the interest of optimizing/enabling user navigation and presenting our websites.
We use Google remarketing technologies.
We use Google's cross-device remarketing technologies so that targeted advertising can be displayed on other websites based on your visits to our websites. Data is processed on the basis of your consent under Art. 6 (1) (1) a) GDPR.
When you visit our websites, it is possible for Google to access recognition features for your browser or your device (e.g., it creates a “browser fingerprint”), analyze your IP address, or store a fingerprint in the form of a small text file on your device (e.g. a “third-party cookie”). It is also possible for Google to link and store your visit to our websites with one or more of these fingerprints in order to show you our ads on other pages on the internet.
The above fingerprints are designed as a pseudonym and can be used by Google in order to recognize your device on other websites. For instance, if you visit a page that takes part in Google's Display Ads network (i.e. that shows ads on behalf of Google), Google can recognize your device and browser using the above features.
We can also use "remarketing tags” on our websites. This means that we can add keywords to our websites that contain information about the content of the page shown (such as product or service categories). The keywords that we use do not include personal or sensitive information. Google receives and stores these keywords for the aforementioned fingerprints. This means that when you visit a page where we have placed keywords for a certain product category, Google will store this keyword and match it with your fingerprints.
This allows us to have Google place ads on other websites that are based on our pages you have visited. In other words, if you visit another website that takes part in the Google Display Ad network, Google can use the fingerprint and the keywords stored on this fingerprint to determine whether our ads should be shown to you, and if so, which ones.
For more information on how the Google remarketing technologies works, see https://www.google.com/policies/technologies/ads/.
If you log onto Google services with your own user ID, or use one or more of your own Google accounts, Google can link the fingerprints from various browsers and devices. If Google has created a separate fingerprint for the laptop, desktop PC, smartphone and/or tablet that you use, these fingerprints can be linked with one another once you use or have used a Google service with your user ID. This allows Google to show our ad campaigns in a targeted manner regardless of device. However, Google will not do this unless you have provided Google with your consent for this data processing in the past.
You can change your ad settings.
You can opt out of this form of processing at any time. To do so, go to https://support.google.com/ads/answer/2662922 and deactivate personalized ads. Please note that these settings may not affect all devices and browsers. You can also find more information at https://support.google.com/ads/answer/2662922.
We take technical and organizational measures to protect your data as much as possible from unauthorized access. We use an encryption method on our sites. Your information is sent from your computer to our server and back via the internet using TLS encryption. You can verify this by making sure that the lock symbol is closed in the status bar of your browser and that the address begins with https://.
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and the specific information listed in Art. 15 GDPR.
You have the right to request the immediate rectification of incorrect personal data about you and, if needed, the completion of incomplete personal data.
You also have the right to request that personal data about you is deleted immediately if one of the specific reasons listed under Art. 17 GDPR applies, e.g. if the data is no longer needed for the intended purpose.
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have filed an objection to the processing, for the duration of any review.
In certain cases, as specified in Art. 20 GDPR, you have the right to receive personal data about you in a structured, standard and machine-readable format or to request that this data be transferred to a third party.
If data is collected on the basis of Art. 6 (1) (1) f) (data processing to protect legitimate interests), you have the right to object at any time to the processing for reasons relating to your particular circumstances. We will no longer process the personal data if there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you feel that the processing of data about you infringes provisions of data protection laws. The right to lodge a complaint can be exercised in particular with a supervisory authority in the member state of your residence, your workplace or the place of alleged infringement.
The following information is to notify you as our client, business partner, supplier, prospective client (or contact person of a business partner, supplier, or prospective client) about how we handle the collection, use and transmission of personal data. The controller for the data processing set forth below is GEG German Estate Group AG.
Under our business relationship with you as our client, business partner, supplier or prospective client, we process personal data such as your name, address, e-mail address, telephone/fax number, tax ID, client number, bank details and possibly your place of birth, date of birth, nationality – if you have voluntarily provided this information to us – and your credit rating. Processing is for the purposes of clear identification and the initiation, performance, management and fulfillment of contracts, the evaluation of credit ratings and collateral, and in particular to prepare invoices and credit notes or refunds, the administration and enforcement of claims, the compliance with legal requirements, data security, and in the interests of comprehensive client support.
The legal basis for data processing is Art. 6 (1) b), c) and f) GDPR.
Your data will be transmitted to third parties outside GEG German Estate Group AG only if you have given express prior consent to transmission, or if we are obligated to do so by law. The legal basis for this data processing is Art. 6 (1) a) in the case of consent or Art.6 (1) c) in the case of a legal obligation. Within GEG German Estate Group AG, your data will be transmitted to fulfill or initiate a business relationship, among other things. In exceptional cases, data will be processed by a third party on our behalf. These providers are always selected with care, are audited by us, and have contractual obligations under Art. 28 GDPR.
We store the data required for the term of the business relationship with you and until the end of the applicable period of limitation, as well as any resulting claims and legal retention obligations.
Our company processes the contact information of contact persons of clients, prospective clients, suppliers and other business partners for communications by e-mail, phone, fax and post. The legal basis for data processing is Art. 6 (1) b) and f) GDPR. The legitimate interest refers to the interest in fulfilling or initiating the business relationship with clients, prospective clients, suppliers and other business partners and maintaining personal contact with contact persons in this regard.
Your data will be transmitted to third parties outside GEG German Estate Group AG only if you have given express prior consent to transmission, or we are obligated to do so by law. The legal basis for this data processing is Art. 6 (1) a) in the case of consent or Art.6 (1) c) in the case of a legal obligation. Within the GEG Group, your data will be transmitted to fulfill or initiate a business relationship, among other things. In exceptional cases, data will be processed by a third party on our behalf. These providers are always selected with care, are audited by us, and have contractual obligations under Art. 28 GDPR.
Personal data will be stored for the purposes of fulfilling business relationships only as long as there is a legitimate interest.
The GEG Group companies use personal data for marketing purposes, especially for marketing via e-mail, phone, and post. The purpose of data processing with regard to marketing activities is to inform data subjects about products and services from the GEG Group. The legal basis for sending advertisements by post is Art. 6 (1) f) GDPR. The legitimate interest refers to the interest in notifying clients and prospective clients about products and services. The legal basis for marketing activities by e-mail or phone is generally a declaration of consent provided by you. There may also be special requirements for marketing activities with existing clients.
You can opt out of advertising at any time with future effect by sending an e-mail to datenschutz@geg.de.
We generally do not transmit data to third parties outside GEG German Estate Group AG. If external providers are used to send advertisements, these are contractually obligated under Art. 28 GDPR and monitored accordingly for compliance with organizational and technical security measures. Your data can be transmitted to other companies within the GEG Group for marketing purposes.
If you object to the receipt of advertising, your data will be blocked immediately and then deleted if it is not stored for other purposes as well.
Unless otherwise stipulated in the above sections, the provision of personal data is not legally or contractually prescribed, nor is it required in order to conclude a contract. You are not required to provide the personal data unless otherwise stipulated in advance. The failure to provide your personal data may mean that we cannot respond to your inquiry, that you cannot take part in an application process, or that you may not be able to participate in an event.
You can contact us using a web form. To use our contact form, you must provide us with your name and e-mail address. You can also provide additional information if you so choose.
By submitting this online form, you agree that the data you provide can be electronically recorded and stored. The legal basis for this processing is Art. 6 (1) (1) a) GDPR. We use your data only to process your request. You can opt out at any time, such as by sending an e-mail to datenschutz@geg.de.

References: Art. 13
 Art. 28
 Art. 6
 Art. 6
 Art. 15
 Art. 17
 Art. 18
 Art. 20
 Art. 6
 Art. 77
 Art. 6
 Art. 6
 Art.6
 Art. 28
 Art. 6
 Art. 6
 Art.6
 Art. 28
 Art. 6
 Art. 28
 Art. 6