Source: https://www.grossmann-berger.com/datenschutz/
Timestamp: 2019-04-25 04:34:45+00:00

Document:
Modern information and communications technologies play an ever bigger role in the activities of companies like Grossmann & Berger GmbH. For this reason, we take very seriously the protection of your privacy and the personal data which you provide to us. We observe as a matter of course the legal provisions designed to protect data privacy, in particular those contained in the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG), and the German Telemedia Act (Telemediengesetz, TMG).
Our Data Protection Officer is available to you, as user, to answer any questions you may have about the processing of your personal data or the protection of data privacy more generally, as well as in the event you wish to file a complaint.
We collect and use the personal data of our users in general only to the extent that doing so is necessary to make available to you a well-functioning website, provide you with content, or perform certain services. In most cases, we collect and use personal data only after obtaining the consent of our users. An exception applies where circumstances make obtaining the prior consent of users impossible and the processing of data is permitted pursuant to the applicable statutory provisions.
To the extent we obtain the consent of the data subject for any step in the processing of personal data, Art. 6 Para. 1 lit. a GDPR serves as the legal basis for our processing of personal data.
In the event that the processing of personal data is necessary to fulfil an agreement to which the data subject is a party, Art. 6 Para. 1 lit. b GDPR serves as the legal basis for so doing. This also applies to steps in the processing of data which are necessary for the execution of pre-contractual measures.
To the extent the processing of personal data is necessary to perform a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c GDPR serves as the legal basis for so doing.
In the event that measures performed in the public interest make it necessary to process personal data, Art. 6 Para. 1 lit. e GDPR serves as the legal basis for so doing.
Where the processing of personal data is necessary to protect the legitimate interests of our company or a third party, and the interests, fundamental rights, and fundamental freedoms of the data subject do not outweigh the legitimate interests of our company, Art. 6 Para. 1 lit. f GDPR serves as the legal basis for such processing.
The personal data we have stored relative to any data subject will be erased or blocked as soon as the purpose for which they were stored is no longer present. The data may, however, continue to be stored where European or national legislation, through regulation, law, or other provisions to which the Controller is subject, so requires. In such cases, the personal data will be blocked or erased once the data retention period has expired, provided there are no circumstances requiring the continued storage of such data for the purpose of concluding or fulfilling an agreement.
Every time someone visits our Website, our system automatically collects data and information concerning the computer system used to access the site.
These data are then also stored in the log files of our system. The log files store IP addresses and the date and time, so that it is possible to identify the user. These data are not stored together with other personal data relevant to the user.
The legal basis for our temporary storage of these data and the log files is Art. 6 Para. 1 lit. f GDPR.
The temporary storage of the user’s IP address by our system is necessary to enable us to transmit our Website to the user’s computer. To this end, the user’s IP address must be stored for the duration of the session.
The data are stored in the log files in order to ensure the functionality of the Website. In addition, these data help us optimize the Website and ensure the security of our information technology systems – in particular to help defend the system against attacks from hackers. No evaluation of the data for marketing purposes is conducted in this connection.
These purposes also constitute our legitimate interest in the processing of user data pursuant to Art. 6 Para. 1 lit. f GDPR.
The data will be erased as soon as they are no longer needed to achieve the purpose for which they were stored. With respect to data collected in order to transmit our website to a user, this will be the case at the conclusion of the internet session.
With respect to data stored in log files, this will be the case after a period of no longer than seven days.
The collection of data used for transmission of the Website and the storage of data in log files is absolutely necessary for operation of the Website. As a result, users have no way of objecting to such procedures.
The user data collected in this way are pseudonymized by technical processes. As a result, it is no longer possible to relate the data to the user who visited our Website. These data are not stored together with other personal data of the user.
The legal basis for our processing of personal data using cookies is Art. 6 Para. 1 lit. f GDPR.
The user data collected by technically required cookies are not used to create user profiles.
We use analysis cookies for the purpose of improving the quality of our Website and enhancing its content. Through the analysis of cookies, we learn how our Website is being used so that we can constantly optimize our offerings.
The cookies are stored in part only until the end of the session (so-called session cookies) and in part long-term, but never for longer than 26 months after your last visit to our Website.
This will install an opt-out-cookie on your device which prevents the future collection of your data by Google Analytics when you visit this Website. The opt-out functions only in the Browser and only for this domain. If you delete the cookies in your browser, you must click on this link again.
We point out that, on this Website, Google Analytics was enhanced by the Code "anonymizelp," in order to ensure that IP addresses are stored anonymously (so-called IP-masking).
By opting out of cookies, there will be no tracking by the tags that are managed by Google Tag Manager. The Google Tag Manager does not change cookie-settings.
You can opt-out the creation of a user profile, Hotjar´s storing of data about your usage of our site and Hotjar´s use of tracking cookies on other websites by following this opt-out link.
We use the Conversion Tracking Pixel service „Custome Audiences“ of Facebook Inc. („Facebook“). Tihs feature is used to show interest-based advertisement (Facebook Ads) to visitors of this website. Therefore the „Facebook Pixel“ is implemented in this website. The collected data remain anonymous for us. This means that we cannot see the personal data of any individual user.
Through this pixel a direct connection to Facebook servers is made during visting the website. Facebook can assign the visit to your account if you are registered at Facebook. Even if you are not registered or logged in, it is possible the provider stores your IP adress and other identifying features. The collected data remain anonymous. This means that we cannot see the personal data of any individual user.
You need to be logged in to deactivate the remarketing feature.
In addition, the following data will be collected in connection with your registration: date and time of registration.
In connection with the registration procedure, we shall request your consent to our processing of these data and refer to this Data Protection Policy.
No data are passed on to third parties in connection with our processing of data in connection with the delivery of our Newsletter. The data are used exclusively for the purpose of sending out the Newsletter.
The legal basis for the processing of data following the user’s registration for our Newsletter is, where the user has consented thereto, Art. 6 Para. 1 lit. a GDPR.
Storage of the user’s e-mail address enables us to deliver the Newsletter. The storage of other personal data in connection with the registration process serves to prevent abuses of our services or of the e-mail address used.
The data will be erased as soon as they are no longer needed to achieve the purpose for which they were stored. This will be the case when you signal to us, by clicking on the unsubscribe link provided with every Newsletter, that you are no longer interested in receiving our Newsletter. The user’s e-mail address will thus be stored only so long as his subscription to the Newsletter is active. Following a successful cancellation of your Newsletter subscription, your personal data will be erased after a period of seven days.
The user in question can cancel his subscription to the Newsletter at any time. To this end, a corresponding link is included in every Newsletter. In this way, we also make it possible for the user to revoke his consent to storage of the personal data collected during the process of registration.
There are contact forms available on our Website, which may be used to contact us electronically. If a user takes advantage of this possibility, the data entered into our form will be transmitted to us, saved, and otherwise processed.
At the time you send us your message, the following additional data will be saved: date and time of your request.
(2) Time your question was submitted.
In the alternative, it is possible for you to contact us via the e-mail address we provide. In this case, the personal data transmitted with your e-mail message will be saved.
No data are passed on to third parties in this connection. Your data are used exclusively for the purpose of processing our conversation.
The legal basis for our processing of data is, where the user has consented thereto, Art. 6 Para. 1 lit. a GDPR. When the contact request is intended to initiate a broker’s agreement, Art. 6 Para. 1 lit. b GDPR provides an additional legal basis therefor.
The legal basis for our processing of data which are transmitted in connection with the sending of an e-mail is Art. 6 Para. 1 lit. f GDPR. When the contact request is intended to initiate an agreement, Art. 6 Para. 1 lit. b GDPR provides an additional legal basis therefor.
The processing of personal data entered into the contact form serves exclusively to help us process your contact request and your real estate questions (in particular information about particular properties, requests for exposés, and requests for appointments for the purpose of a general consultation or viewing of a particular property).
In the event that you submit a request to be contacted or provided with information about a specific property by e-mail, such request also constitutes our required legitimate interest in processing your data.
When the contact request is intended to initiate the signing of an agreement or seek the referral of an agreement through the broker, our processing of your personal data also makes it possible to prove our activity as broker on your behalf.
The other personal data collected in connection with the procedure for sending your contact request serve to prevent abuse of the contact form and ensure the security of our information technology systems.
The data will be erased as soon as they are no longer needed to achieve the purpose for which they were stored. With respect to the personal data collected by means of a user’s entries into the contact form and such as are sent to us by e-mail, this will be the case when the conversation with that user has been concluded. The conversation is concluded when the circumstances indicate that the matter in question has been definitively settled.
Any additional personal data collected during the process of sending the contact form will be erased after a period of no longer than seven days.
The user can revoke his consent to our processing of his personal data at any time. Where the user has contacted us by e-mail, he can object to our storage of his personal data at any time. In this case, it is not possible to carry on the conversation.
The simplest way for you to revoke your consent or submit an objection is to write an e-mail to the following address: info@grossmann-berger.de.
In that case, all personal data which were saved in the course of your contacting us will be erased.
There are services and offers of third-parties available on our Website, which may be used to contact us electronically. If a user takes advantage of this possibility, the data entered into our form will be transmitted to us, saved, and otherwise processed.
You are entitled to require that we confirm whether any personal data concerning you are being processed by us.
(8) the existence of automated decision-making, including profiling, referred to in Article 22 Paras. 1 and 4 GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you as data subject.
You have the right to demand information about whether your personal data have been transmitted to any foreign country or international organization; and in connection herewith, the right to be informed about the appropriate safeguards under Art. 46 GDPR relative to such transmission.
You have the right to insist on rectification and/or completion from us, to the extent the personal data pertaining to you which we process are false or incomplete. We are obligated to carry out the rectification without undue delay.
(4) if you have objected to the processing of your personal data pursuant to Art. 21 Para. 1 GDPR, and it has not yet been determined whether the Controller’s legitimate interests outweigh your interests.
If the processing of your personal data has been restricted, these data may be processed – apart from the process of storing them – only with your consent or for the purpose of establishing, exercising, or defending legal claims or protecting the rights of another natural or legal person, or for reasons constituting a significant public interest of the European Union or a Member State.
If the processing of your personal data has been restricted in accordance with the conditions set forth above, we will notify you before the restriction is lifted.
(6) Your personal data have been collected in relation to the offer of information society services referred to in Art. 8 Para. 1 GDPR.
Where we as Controller have made your personal data public and are obliged pursuant to Art. 17 Para. 1 GDPR to erase the personal data, we will, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform controllers which are processing your personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
If you have exercised your right to rectification, erasure, or restriction of processing with regard to us as Controller, we are obligated to communicate this to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
We will inform you about those recipients if you request.
In exercising this right, you moreover have the right to have the personal data transmitted directly from us as Controller to another controller, where technically feasible.
The right to data portability shall not adversely affect the rights and freedoms of others; and this right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us as Controller.
In this case, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms; or such processing serves the establishment, exercise or defense of legal claims.
Where your personal data are processed for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
You have the right to revoke, at any time, your consent under data privacy law. Such revocation of consent shall have no impact on the lawfulness of processing conducted on the basis of such consent prior to its revocation.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or with similar significance affects you.
Such decisions, however, may not be based on special categories of personal data referred to in Article 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in points (1) and (3) above, we as data Controller will implement suitable measures to safeguard your rights and freedoms and legitimate interests, including at least your right to obtain the intervention of a natural person on our part, the right to express your point of view, and the right to contest the decision.
Without prejudice to any other administrative or judicial remedy, you as data subject have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 21
 Art. 8
 Art. 17
 Art. 9