Source: http://dzhyp.de/en/data-protection/
Timestamp: 2019-04-25 03:44:22+00:00

Document:
As a leading real estate bank in Germany, DZ HYP offers comprehensive financing solutions for your real estate project – whether for commercial, housing, municipal or private investment.
In principle, we only process our users' personal data insofar as this is necessary for the maintenance of a functional website and the provision of our content and services. The processing of our users' personal data generally occurs only if there is a statutory legal basis to do so, or if the user has given his/her consent.
From time to time, we might need to update this data protection notice, e.g. in the case of new statutory or official regulations, as well as in in the event of new offers on our website. Should this situation arise, we will inform you about the change on the website.
Each time this website is accessed, our system automatically records data and information from the computer system of the calling computer.
The system temporarily stores the user's IP address, in order to make the website available on the user's computer. To do this, the user's IP address must be stored for the duration of the session.
Storage in log files is carried out to ensure the functional capability of the website. The data also helps us to optimise the website and ensure the security of our IT systems. We can also analyse the IP address in the event of attacks on our internet infrastructure, in order to ward off an attack on our internet infrastructure, to determine the source of the attack, to be able to initiate civil or criminal proceedings against the person responsible and to effectively prevent further attacks. No data is evaluated for marketing purposes in this context.
The data is deleted after one month.
The collection of data for the provision of the website and the storage of data in log files is necessary for operating the website. Therefore, the user cannot object.
This website uses Google Maps to show maps and create route maps. The provider of Google Maps is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Should you use the advanced functions Google offers, e.g. by clicking on the map displayed, you are using a Google service beyond our control. In this case, the requirements and instructions from Google made in this context apply.
As an alternative, you can contact us using the e-mail address provided. In this case, the user's personal data transmitted along with the e-mail will be stored.
The legal basis for the processing of data transmitted during use of the contact form or via e-mail is Art. 6 (1) f of the GDPR, or the performance of a contract pursuant to Art. 6(1) b of the GDPR, provided a client or interested party makes contact.
We only process personal data taken from the input template of the contact form or your e-mail for the purposes of making contact.
Other personal data processed during this process serves to prevent misuse of the contact form and to guarantee the security of our IT systems.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Personal data taken from the input template of the contact form and sent by e-mail is deleted when the respective correspondence with the user has ended. Correspondence concludes when it can be inferred from the circumstances that the matter in question has been conclusively resolved.
The additional personal data collected during this process is deleted after a period of seven days at the latest.
Users have the right to object at any time, on grounds relating to their particular situation, to processing of personal data concerning them which is based on Art. 6 (1) f of the GDPR.
The controller will no longer process the personal data concerning the users, unless he/she can demonstrate compelling legitimate grounds which override the users' interests, rights and freedoms, or where the processing serves to establish, exercise or defend legal claims.
Users can exercise their right to object by automated means, using technical specifications, in connection with the use of services of the information society – regardless of Directive 2002/58/EC.
All personal data stored within the course of making contact is deleted, as long as the aforementioned exceptions are not pertinent and providing no retention periods have to be observed.
You will have the right to obtain confirmation from the controller as to whether or not we are processing personal data concerning you.
the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) of the GDPR, and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You will have the right to request information as to whether the personal data concerning you is transmitted to a third country or an international organisation.
You will have the right to obtain the rectification and/or completion from the controller, provided the personal data concerning you is incorrect or incomplete. The controller shall execute the rectification instantly.
if you have objected to processing pursuant to Art. 21 (1) of the GDPR, pending verification as to whether the legitimate grounds of the controller override yours.
If processing has been restricted pursuant to the aforementioned requirements, you will be informed by the controller before the restriction of processing is lifted.
the personal data concerning you has been collected in relation to the offer of information society services referred to in Art. 8 (1) of the GDPR.
Should you have exercised the right to rectification, erasure or restriction of processing vis-à-vis the controller, he/she is compelled to communicate this rectification or erasure of data or restriction of processing to each recipient to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort.
You will have the right vis-à-vis the controller to be informed about those recipients.
data is processed by automated means.
In exercising this right, you will further have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The rights and freedoms of others may not be adversely affected by this.
You will have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on Art. 6 (1) e or f of the GDPR.
The controller will no longer process the personal data concerning you, unless he/she can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or where the processing serves to establish, exercise or defend legal claims.
You can exercise your right to object by automated means, using technical specifications, in connection with the use of services of the information society – regardless of Directive 2002/58/EC.
Without prejudice to any other administrative or judicial redress, you will have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority the complaint was lodged with informs the complainant about the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 of the GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 21
 Art. 8
 Art. 6
 Art. 78