Source: https://roomestate.com/en/data-policy
Timestamp: 2019-04-25 06:44:37+00:00

Document:
Logicom Logistics & Communications AG and its subsidiaries (hereinafter referred to as "Room Estate", "roomestate.com", "we" or "us") look forward to your visit to one of our websites, apps or other media. To provide the features, products and services, we need to process information about you. The types of information we collect depend on how you use our products. When collecting and processing your personal data, we undertake in particular to observe the provisions of Regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR) and the Federal Act on Data Protection (FADP) of 19 June 1992 (Status as of 1 January 2014).
technical and organizational measures ensuring that the personal data are not attributed to an identified or identifiable natural person.
"Profiling" means any automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to the work performance, economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or movements of that natural person.
"Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
the legal basis for processing to fulfil our legal obligations is Art. 6 para. 1 lit. c GDPR; In the event that vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
The legal basis for the processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority entrusted to the controller is Art. 6 para. 1 lit. e GDPR.
processing of special categories of data (pursuant to Art. 9 para. 1 GDPR) is governed by the provisions of Art. 9 para. 2 GDPR.
If the GDPR does not conflict with the FADP, the GDPR shall apply to the same extent to users from the area of application of the Swiss Confederation.
We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the type, extent, circumstances and purposes of the processing as well as the different probability of occurrence and severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.
The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling the physical access to the data as well as the access to, inputting, forwarding, securing and separating the data. In addition, we have established procedures to ensure that data subjects' rights are exercised, that data is deleted and that we react to data threats. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and processes, in accordance with the principle of data protection through technology design and through data protection-friendly default settings.
If we disclose data to other persons and companies (contract processors, jointly responsible persons or third parties) in the context of our processing, transfer them to them or otherwise grant them access to the data, this will only be done on the basis of a legal permission (e.g. if a transfer of the data to third parties, such as payment service providers, is necessary for the performance of the contract), users have consented, a legal obligation this provides, on the basis of our legitimate interests (e.g.B. with the employment of representatives, Web hosters, etc.), to the arrangement of an appointment directly by a third party in the sense of the user (e.g. inspection date by a prospective customer, lack removal by craftsmen, fulfilment of a service line, etc.) or after conclusion of a contract and/or introduction into the same Community (e.g. dwelling) of a co-inhabitant (e.g. for the purpose to get to know itself, to set up the organization of common goods in the residential community, etc.).
You have the right to request confirmation as to whether the data in question will be processed and to be informed of this data and to receive further information and a copy of the data in accordance with the legal requirements.
You have the right, in accordance with the law, to request the completion of the data concerning you or the correction of the incorrect data concerning you.
In accordance with the statutory provisions, you have the right to demand that the relevant data be deleted immediately or, alternatively, to demand that the processing of the data be restricted in accordance with the statutory provisions. An exception to this deletion obligation is basically the situation where the processing of personal data is necessary to fulfil an obligation under national or EU law (Art. 17 Para. 3 lit. b GDPR) (e.g. in the case of a current rental agreement, open claims, accounting and tax obligations, etc.).
You also have the right to file a complaint with the competent supervisory authority in accordance with the legal requirements.
“Cookies" are small files that are stored on the user's computer. Different data can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after the user's visit to an online service. Temporary cookies, or "session cookies" or "transient cookies", are cookies that are deleted after a user leaves an online offer and closes his browser. The content of a shopping cart in an online shop or a login status, for example, can be stored in such a cookie. Cookies are referred to as "permanent" or "persistent" and remain stored even after the browser is closed. For example, the login status can be saved if users visit it after several days. The interests of the users can also be stored in such a cookie, which are used for range measurement or marketing purposes. Third-Party-Cookie" are cookies that are offered by other providers than the responsible person who operates the online service (otherwise, if they are only their cookies, one speaks of "First-Party Cookies").
the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.
for a large number of services, especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/ . Furthermore, the storage of cookies can be achieved by switching them off in the browser settings. Please note that in this case not all functions of this online offer can be used.
You can find more information about cookies on our website in our Cookie Compliance.
The data processed by us will be deleted or their processing restricted in accordance with the statutory provisions. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.
Logistics-relevant data (e.g., condition, location and use of furniture, performance of services in our properties, etc.) by our customers, interested parties and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.
The processed data includes inventory data, communication data, contract data, payment data, personal profile data, job-related data and the persons affected by the processing include our customers, interested parties and other business partners. Processing is carried out for the purpose of providing contractual services within the framework of operating an online shop, billing, delivery and customer services. We use session cookies to store the contents of the shopping cart and permanent cookies to store the login status.
Processing is carried out to fulfil our services and to carry out contractual measures (e.g. carrying out order processes, getting to know potential new flatmates personally, etc.). and insofar as it is required by law (e.g., legally required archiving of business transactions for trading and tax purposes). The information marked as necessary is required to substantiate and fulfil the contract. We only disclose the data to third parties within the scope of delivery, payment or within the scope of the statutory permits and obligations, and also if this is done on the basis of our legitimate interests, about which we inform you in the context of this data protection declaration (e.g., to legal and tax consultants, financial institutions, freight companies and authorities).
Users can optionally create a user account by viewing their orders in particular. Within the framework of registration, the required mandatory information will be communicated to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data will be deleted with regard to the user account, subject to its retention is necessary for commercial or tax reasons. Information in the customer account remains until its deletion with subsequent archiving in the case of a legal obligation or our legitimate interests (eg, in the case of litigation). It is the responsibility of the users to secure their data before the end of the contract in the event of termination.
Within the scope of registration and renewed registrations as well as use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the user's protection against misuse and other unauthorized use. This data will not be passed on to third parties unless it is necessary as a legitimate interest to pursue our legal claims or unless there is a legal obligation to do so.
The deletion takes place after expiry of statutory warranty and other contractual rights or obligations (e.g., payment claims or performance obligations from contracts with customers), whereby the necessity of the storage of data is reviewed every three years; in the case of storage due to statutory archiving obligations, the deletion takes place insofar after their expiry. In addition, user accounts can only be deleted if there are no more active obligations on both sides (e.g. a rental agreement).
We process the data of our customers, clients and interested parties (uniformly referred to as "customers") in accordance with Art. 6 para. 1 lit. b. GDPR in order to provide them with our contractual or pre-contractual services. The data processed, the nature, extent and purpose of the processing and the necessity of its processing shall be determined by the underlying order. This basically includes the inventory and master data of the customers (name, address, etc.), as well as the contact data (e-mail address, telephone, etc.), the contract data (content of the order, fees, terms, information on the brokered companies / insurers / services) and payment data (commissions, payment history, etc.). Furthermore, we may process information on the characteristics and circumstances of persons or items belonging to them if this is part of our order. These can be, for example, information on personal circumstances, mobile or immovable assets.
As part of our assignment it may also be necessary for us to process special categories of data in accordance with Art. 9 Para. 1 GDPR, in particular information on the health of a person. In accordance with Art. 6 Para. 1 lit. a., Art. 7, Art. 9 Para. 2 lit. a GDPR, we obtain the express consent of the customer for this purpose, if necessary.
Insofar as this is necessary for the fulfilment of the contract or required by law, we disclose or transmit customer data within the scope of cover requests, conclusion and execution of contracts to providers of the brokered services/properties, insurers, reinsurers, broker pools, technical service providers, other service providers, such as cooperating associations, as well as financial service providers, credit institutions and investment companies, social insurance institutions, tax authorities, tax consultants, legal advisors, auditors, insurance ombudsmen and state institutions. We can also commission subcontractors, such as sub-brokers. We obtain the consent of the customers if this is necessary for the disclosure / transmission of a consent of the customers (which may be the case, for example, in the case of special categories of data under Art. 9 GDPR).
In the case of the legal archiving obligations the deletion takes place after their expiration.
Within the framework of the performance of contracts, we shall appoint payment service providers on the basis of Art. 6 para. 1 lit. b. GDPR. We also use external payment service providers on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f. GDPR in order to offer our users effective and secure payment options.
We process data in the context of administrative tasks as well as the organisation of our business, financial accounting and compliance with legal obligations, such as archiving. Here we process the same data that we process within the framework of the provision of our contractual services. The processing bases are Art. 6 para. 1 lit. c. GDPR, Art. 6 para. 1 lit. f. GDPR. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in the processing lies in the administration, financial accounting, office organization, archiving of data, i.e. tasks which serve the maintenance of our business activities, performance of our tasks and provision of our services. The cancellation of the data with regard to contractual services and contractual communication corresponds to the data specified in these processing activities.
We disclose or transmit data to the tax authorities, consultants, such as tax consultants or auditors, as well as other fee offices, payment service providers and residential, registration and migration offices (insofar as the law obliges us to do so).
In order to run our business economically, to be able to recognise market trends, wishes of our contractual partners and users, we analyse the data available to us on business transactions, contracts, enquiries, etc., in order to identify the most suitable and appropriate solutions for your needs. We process inventory data, communication data, contract data, payment data, usage data, metadata on the basis of Art. 6 para. 1 lit. f. GDPR, whereby the persons concerned include contractual partners, interested parties, customers, visitors and users of our online service.
The analyses are carried out for the purpose of economic evaluations, marketing and market research. We can take into account the profiles of registered users with information, e.g. on the services they have used. The analyses help us to increase user-friendliness, to optimise our range of products and services and to improve business efficiency. The analyses serve us alone and are not disclosed externally unless they are anonymous analyses with summarized values.
Within our online offer, we use customary tracking measures on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer) pursuant to Art. 6 Para. 1 lit. f GDPR, insofar as these are necessary for the operation of the affiliate system. In the following we inform the users about the technical background.
The online identifiers of the users used by us are pseudonymous values. This means that the online identifiers themselves do not contain any personal data such as names or e-mail addresses. You only help us to determine whether the same user who clicked on an affiliate link or was interested in an offer via our online offer has taken up the offer, i.e. concluded a contract with the provider, for example. However, the online identifier is personal to the extent that the partner company and we have the online identifier together with other user data. This is the only way the partner company can tell us whether the user has taken up the offer and we can, for example, pay out the bonus.
Users can create a user account. Within the scope of registration, the required mandatory data will be communicated to the users and processed on the basis of Art. 6 para. 1 lit. b GDPR for the purpose of providing the user account. The processed data includes in particular the login information (name, password and an e-mail address). The data entered during registration will be used for the purposes of using the user account and its purpose. We collect the content, communications and other information you provide when using our products, including your registration for an account, creating or sharing content, and exchanging messages or communicating with others.
Within the scope of using our registration and login functions as well as the use of the user account, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the user's protection against misuse and other unauthorized use. This data will not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so pursuant to Art. 6 Para. 1 lit. c. GDPR. The IP addresses are anonymized or deleted after 7 days at the latest.
If users leave comments or other contributions, their IP addresses may be deleted on the basis of our legitimate interests within the meaning of Art. 6 Para. 1 lit. f. of the German Data Protection Act. GDPR for 7 days. This is done for our safety, if someone leaves illegal contents (insults, forbidden political propaganda, etc.) in comments and contributions. In this case, we ourselves can be prosecuted for the comment or contribution and are therefore interested in the author's identity.
Furthermore, we reserve the right, on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f. GDPR to process user data for the purpose of spam detection.
Subsequent comments may be subscribed to by users with their consent pursuant to Art. 6 para. 1 lit. a GDPR. Users will receive a confirmation email to verify that they are the owner of the email address entered. Users can unsubscribe from current comment subscriptions at any time. The confirmation email will contain information on the cancellation options. For the purposes of proving the users' consent, we store the time of registration along with the users' IP address and delete this information when users unsubscribe from the subscription.
When contacting us (e.g. via contact form, e-mail, telephone or via social media), the user's details are used to process the contact enquiry and to process it in accordance with Art. 6 Para. 1 lit. b. of the German Data Protection Act. (within the framework of contractual/pre-contractual relationships), Art. 6 para. 1 lit. f. (other requests) GDPR processed. The user data can be stored in a customer relationship management system ("CRM system") or comparable inquiry organization.
In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, data on the personality profile, occupation-relevant data, interested parties and visitors to this online service on the basis of our legitimate interests in the efficient and secure provision of this online service in accordance with Art. 6 Para. 1 lit. f GDPR i.V.m. Art. 28 GDPR (conclusion of contract processing agreement).
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer in the sense of Art. 6 Para. 1 lit. f. of the German Civil Code), we make use of the information provided on this website. GDPR) the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google").
Facebook processes the data in accordance with the Facebook Data Usage Policy. Accordingly, general information about the presentation of Facebook ads in the Facebook Data Usage Policy: https://www.facebook.com/policy. For specific information and details about the Facebook pixel and how it works, visit the Facebook Help Center: https://www.facebook.com/business/help/651294705016616.
You may opt out of Facebook pixel collection and use of your information to display Facebook ads. To set what types of ads you see within Facebook, you can go to the page set up by Facebook and follow the instructions on how to set up usage-based ads: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e. they are adopted for all devices, such as desktop computers or mobile devices.
Within the scope of our online offer, we act on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. of the German Civil Code). GDPR), the conversion and tracking tool "Bing Ads" of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft stores cookies on users' devices in order to enable an analysis of the use of our online services by users if users have reached our online services via a Microsoft Bing display (so-called "conversion measurement"). In this way, Microsoft and we can recognize that someone has clicked on an advertisement, has been redirected to our online service and has reached a predetermined target page ("conversion page"). We only get to know the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No IP addresses are stored. No personal information about the identity of the users will be communicated.
If users do not wish to participate in the tracking process of Bing Ads, you can also deactivate the setting of a cookie required for this via the browser setting or use the opt-out page of Microsoft: http://choice.microsoft.com/de-DE/opt-out.
Users can find further information on data protection and the cookies used by Microsoft Bing Ads in Microsoft's data protection declaration: https://privacy.microsoft.com/de-de/privacystatement.
Within our on-line offer on the basis of our entitled interests (i.e. interest in the analysis, optimization and economic enterprise of our on-line offer in the sense of the art. 6 exp. 1 lit. f. GDPR) the service Visual Website Optimizer (an offer of Wingify Software Private Limited, 404, Gopal Heights, Netaji Subhash Place, Pitam Pura, Delhi 110034, India).
Visual Website Optimizer allows you to track the effects of various changes to a website (e.g. changes to input fields, design, etc.) within the framework of so-called "A/B-Testings", "Clicktracking" and "Heatmaps". A/B tests are designed to improve the usability and performance of online services. For example, users are presented with different versions of a website or its elements, such as input forms, on which the placement of the contents or labels of the navigation elements can differ. Subsequently, the behaviour of users, e.g. prolonged visits to the website or more frequent interaction with the elements, can be used to determine which of these websites or elements are more suited to the needs of users. "Clicktracking" allows you to keep track of the movements of users within an entire online offering. Since the results of these tests are more accurate if the interaction of the users can be followed over a certain period of time (e.g. if a user likes to return), cookies are usually stored on the computers of the users for these test purposes. "Heatmaps" are mouse movements of the users, which are combined to an overall picture, with the help of which it can be recognized, for example, which web page elements are preferred and which web page elements users prefer less.
If you do not want the Visual Website Optimizer to record your usage behavior, you can opt out of data collection using this link: https://roomestate.com/?vwo_opt_out=1.
Furthermore, user data is usually processed for market research and advertising purposes. For example, user profiles can be created on the basis of user behaviour and the resulting interests of users. The user profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the user's computer, in which the user's usage behaviour and interests are stored. Furthermore, data can be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
Within the scope of our online offer, we act on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. of the German Civil Code). GDPR) content or service offers from third parties in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content").
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer in the sense of Art. 6 Para. 1 lit. f. of the German Civil Code), we act in accordance with the following principles GDPR) external "Typekit" fonts from Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland. Adobe is certified under the Privacy Shield Agreement, which guarantees compliance with European privacy laws (https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active).
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer in the sense of Art. 6 Para. 1 lit. f. of the German Civil Code), we make use of the information provided on this website. GDPR) Social Plugins ("Plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
When a user calls a function of this online service that contains such a plugin, his device establishes a direct connection with the Facebook servers. The content of the plugin is transmitted directly from Facebook to the user's device and integrated into the online offer by the user. User profiles can be created from the processed data. We therefore have no influence on the extent of the data that Facebook collects with the help of this plugin and therefore inform the user according to our state of knowledge.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as the related rights and setting options to protect the privacy of users can be found in Facebook's data protection information: https://www.facebook.com/about/privacy/.
If a user is a Facebook member and does not want Facebook to collect information about him or her via this online service and link it to his or her Facebook member data, he or she must log out of Facebook and delete cookies before using our online service. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US page http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are adopted for all devices, such as desktop computers or mobile devices.
Within our online offer functions and contents of the platform Google+, offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), can be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can share content from this online service within Google. If the users are members of the Google+ platform, Google can assign the call of the above-mentioned contents and functions to the profiles of the users there.

References: Art. 6
 Art. 6
 Art. 6
 Art. 9
 Art. 9
 Art. 6
 Art. 9
 Art. 6
 Art. 7
 Art. 9
 Art. 9
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 art. 6
 Art. 6
 Art. 6
 Art. 6