Source: https://www.germanreal.com/en/data-privacy
Timestamp: 2019-04-18 12:54:49+00:00

Document:
We are glad about your interest in our corporation. Data privacy has a high significance for the directorate of the GermanReal Asset & Property Management GmbH.
The use of the websites of the GermanReal Asset & Property Management GmbH is generally possible without giving away personal data. In case of potential usage of the services of our corporation via our website, the converting of personal data might be necessary. If the converting of personal data is necessary, it will be done according to art. 6 (1) lit. b and c General Data Protection Regulation (GDPR).
The GermanReal Asset & Property Management GmbH as the responsible part for treatment implemented numerous technical and organisational actions to guarantee a preferably complete protection of the personal data handled on our website. Nevertheless, web based data transfer can generally show security flaws, so that an absolute protection can not be granted. For this reason every person is free to transfer personal data on alternative ways, such as for example through telephone.
The webpage of the GermanReal Asset & Property Management GmbH collects a line of general data and information by any visit of a person concerned or an automatic system. The general data and information will be saved in the logfiles of the servers. The following might be collected: (1) the used browsertypes and versions, (2) the used operating system, (3) the internet page, from where an accessing system reaches to our internet page (so called referrer), (4) the sub-websites, which by an accessing system call on our web page, (5) the date and time of the access on our website, (6) the internet-protocoll-adress (IP-adress), (7) the internet-service-provider of the accessing system and (8) other similar data and information, that serve the danger prevention in case of attacks on our technical systems.
By the use of this general data and information the GermanReal Asset & Property Management GmbH will not draw any conclusions from the person concerned. These information are rather needed to (1) deliver the contents of our website correctly, (2) to optimize the contents of our website as well as the advertisment for it, (3) to guarantee the permanent efficiency of our technological systems and the technics on our website and (4) to provide the necessary information to the law enforcement agency for procecution in case of a cyber attack. This anonymously collected data and information will on one hand be statistically evaluated and serve the purpose of increasing the data protection and privacy within the GermanReal Asset & Property Management GmbH to finally secure an ideal protection level of the personal related data processed by us. The anonymous data of the server-logfiles will be saved seperately by any of the person concerned stated personal data.
The person concerned has the possibility to registry on the website of the person responsible for processing under specification of personal data. Which personal data is transferred to the person responsible for progressing can bee seen on the particular input mask used for the registration. The personal data typed in by the person concerned will only be used for the internal application by the person responsible for the processing and be archived and collected for own purpose. The person responsible for the processing can induce the transmitting to one or more service provider, for example a parcel service, that exclusively will use the personal data internal, which is referred to the person responsible for processing.
Also with the registration on the website of the person responsible for the processing the by the internet-service-provider (ISP) concerned person given IP-adress, the date and the time of the registration will be saved. This happens to prevent any abuse of our services and to make it possible solving such a crime. Insofar the saving of this data is required as safeguard for the person responsible for the processing. A transfer of this data to a third party does generally not happen, unless there is no legal duty for the transferring or it is required for prosecution.
The registration of the person concerned under declaration by choice only serves for the person responsible for the processing to offer the person concerned contents and services, that by nature of the circumstances can only be offered to registered users. Registered persons have the option to change or completely delete their at the time of registration given personal data out of the database of the person responsible for processing at any time.
The person responsible for the processing gives any person concerned at any time information about what personal data of the person concerned is archived. Further the person responsible for the processing corrects or deletes personal data if the person concerned demands this, unless it does not conflict with the legitimate periods for safekeeping. One in this data privacy statement named security advisor can be contacted at any time by the person concerned.
The website of the GermanReal Asset & Property Management GmbH contains, due to the statutory provisions, several information that allow a fast electronical approach to our corporation as well as the possibility to communicate directly with us, which also includes a general adress of the so called electronic mail (e-mail-adress). If a person concerned gets in touch with the person responsible for the processing via e-mail or a contact form, the by the person concerned transmitted personal data will be automatically saved. Such on a voluntary basis by a person concerned to the person responsible for the processing transmitted data will be saved for the purpose of processing and contacting the person concerned. There will not be any transmission of this personal data to a third party.
Any person concerned has by the european directive- and ordinancegiver the right to receive a confirmation from the person responsible for the processing, if data from the person concerned has been proceeded. In case the person concerned wishes to make use of this confirmationright, our security administrator or another assistant of the person responsible for the processing can be contacted at any time.
Any by the processing of personal data affected person has the by the european directive- and ordinancegiver guaranteed right to receive gratuitous information about the collected personal data from the person responsible for the processing and to get a copy containing this information at any time. Further the person concerned has a right to be informed, whether the personal data has been transmitted to a third party country or an international organisation. If this is the case, the person concerned has by the way the right to get information about the appropriate guarantee in correlation to the transmission.
Does the person concerned want to exercise this right of information, our security administrator can be contacted at any time.
Does the person concerned want to exercise this right of adjustment, our security administrator can be contacted at any time.
● The personal data was collected for such a purpose or in a similar way proceeded, for which it is not necessary anymore.
● The person concerned withdraws the agreement on which the processing according to art. 6 para. 1 letter a GDPR or art. 9 para. 2 letter a GDPR was based, and another legal foundation is lacking.
● The person concerned files an objection according to art. 21 para. 1 GDPR against the processing, and there are no prior justified reasons for the processing, or the person concerned files an objection according to art. 21 para. 2 GDPR against the processing.
● The personal data illegally processed.
● The deletion of personal data is required for the implementation of a legal commitment by the union right or the right of the member states, that the person responsible has to follow.
● The personal data was collected in matters of offered services by the information society according to art. 8 para. 1 GDPR.
Provided that one of the reasons mentioned above is true and the person concerned wants the deletion of the personal data saved by the GermanReal Asset & Property Management GmbH, our security administrator can be contacted at any time. The security administrator will initiate the immediate deletion.
● The correctness of the personal data is contradicted by the person concerned, namely for a period of time which allows it for the person responsible to check on the correctness of the personal data.
● The processing is illegal, the person concerned refuses the deletion of personal data and demands the limitation of use of the personal data instead.
● The person responsible does not require the personal data for the purpose of processing anymore, the person concerned however requires it for enforcement, exercise or advocacy on a legitimate claim.
● The person concerned filed an objection against the processing according to art. 21 para. 1 GDPR and it is not certain so far whether the justified reasons of the person responsible to the person concerned overweight.
Provided that one of the preconditions mentioned above is true and the person concerned wants the limitation of the personal data saved by the the GermanReal Asset & Property Management GmbH, our security administrator can be contacted at any time. The security administrator will initiate the immediate limitation of processing.
Any of the processing of personal data concerned person has the by the european directive- and ordinancegiver guaranteed right to receive the own personal data, which has been provided by the person concerned to a person responsible, in a well-established and machine-readable format.
Also the person hast the right to transmit this data to another person responsible without any obstruction by the person responsible who received the personal data in the first place, as long as the processing is based on the agreement according to art. 6 para. 1 letter a GDPR or art. 9 para. 2 letter a GDPR or on a contract according to art. 6 para. 1 letter b GDPR and the processing happens by an automatic process, in case the processing is not necessary to perform a task referring to a public interest or the exercise of a public authority given to the person responsible.
Also the person concerned by exercising the right of data transfer according to art. 20 para. 1 GDPR has the right to obtain the personal data transferred directly from the person responsible to another person responsible, if this can be achieved by technical ressources and the rights and liberties of other people are not affected in any way.
To enforce the right of data transfer the person concerned can contact the by the GermanReal Asset & Property Management GmbH authorized security administrator at any time.
Any by the processing of data person concerned has the by the european directive- and ordinancegiver guaranteed right for reasons, that are given by a special situation, to object the processing of personal related data which happened according to art. 6 para. 1 letter e or f GDPR. This also concernes to a profiling based on these regulations.
The GermanReal Asset & Property Management GmbH will not proceed personal data anymore in such a case, unless we can deliver strong, protection requiring reasons that overweight the interests, rights and liberties of the person concerned, or the processing serves the enforcement, exercise or defense of a legitimate claim.
To exercise the right of data transfer the person concerned can contact the by the GermanReal Asset & Property Management GmbH authorized security administrator at any time.
To exercise the right of data transfer the person concerned can contact our security administrator at any time.
The processing of personal data takes place to guarantee the implementation of a contract, which contracting party is the person concerned. This for instance happens during processing operations necessary for delivery of goods or the supply of services or return services. So the processing is based on art. 6 I lit. b GDPR. The same applies for such processing procedures that are required for the enforcement of arrangements before the contract is fullfilled, like in cases of requests to our products or services. Also our corporation succumbs to a legal obligation by which the processing of personal data is necessary, for example to fullfill fiscal duty, so the processing is based an art. 6 I lit. c GDPR.

References: art. 6
 art. 6
 art. 9
 art. 21
 art. 21
 art. 8
 art. 21
 art. 6
 art. 9
 art. 6
 art. 20
 art. 6
 art. 6
 art. 6