Source: https://the-flag.de/en/data-protection-policy/
Timestamp: 2020-02-27 18:18:18
Document Index: 788317225

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

Data Protection Policy - THE FLAG
This Data Protection Policy contains information on the extent to which we process your personal data (hereinafter referred to as “data”).
The controller in accordance with the General Data Protection Regulation (GDPR) is:
Listertalstrasse 73
Website: www.the-flag.de
3. Data protection officer contact details
We process data to operate our website. This also includes disclosure in the form of transfer to third parties and, if necessary, to so-called third countries outside the European Union (EU) and the European Economic Area.
An adequacy decision, the so-called “EU-US Privacy Shield”, has been issued by the EU Commission for data transfers to the USA. With this decision, the EU Commission confirms that the guarantees given for data transfers to the USA are based on the provisions of the EU-US Privacy Shield and meet the EU data protection standard. We have marked the participation of our service providers in the EU-US Privacy Shield whenever we transfer data to the USA.
The individual data affected, processing purposes, legal bases, recipients and transfer to third countries are stated below:
a) Log files when visiting websites
We log your website visit. We process the name of the accessed web page, date and time of access, transferred data volume, browser type and version, your operating system, referrer URL (previously visited web page), your IP address and querying provider. This is necessary to ensure that the website is secure. We process the data on the basis of our legitimate interests in accordance with Art. 6 (1) lit. f GDPR, to guarantee the security of the website. Log files are deleted after seven days, unless they are required for clarifying or proving specific violations of the law that have been uncovered within the retention period.
All data related to the operation of this website is stored as part of the hosting process. The data is processed on the basis of our legitimate interests in accordance with Art. 6 (1) lit. f GDPR, to make it possible to operate the website. We use the services of web hosting providers to operate our website to whom we transfer the above-stated data (Section 4 b).
If you contact us, we process your name, any contact details you provide and your message for the sole purpose of processing and handling your query. The data is processed on the basis of Art. 6 (1) lit. b GDPR for the fulfilment of the agreement and/or our pre-contractual obligations or on the basis of our legitimate interests in accordance with Art. 6 (1) lit. f GDPR for the purpose of processing your query.
d) Contacting us for job applications
If you contact us to send us your job application, e.g. per e-mail or through a contact form, your data (e.g. name, e-mail address, requested place of work, if stated by you), your message and the submitted job application documents are processed for the sole purpose of processing and handling your job application. The predominant legal basis for these data processing activities is Section 26 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). It states that data may be processed which is required in connection with making a decision about concluding an employment contract with an applicant.
Should the data be required once the application process has closed, i.e. for prosecution purposes, the data may be processed to maintain our legitimate interests in accordance with Art. 6 (1) lit. f GDPR, namely for the assertion and/or defence of claims.
e) Inclusion in our pool of applicants
By your request, we can include your application profile in our pool of applicants so that we can consider and invite you to apply for suitable vacancies. The data is processed on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
You can subscribe to our e-mail newsletter to receive regular information on our company and products. When subscribing to the newsletter, we process the data entered by you (e-mail address and other voluntary information). We use the double-opt-in method for newsletter subscriptions. To prevent misuse, we will send you an e-mail requesting that you confirm your subscription once you have subscribed. Your subscription is logged in order to have evidence that the subscription process meets legal requirements. We log the storage of the subscription and confirmation date and time as well as your IP address.
The subscription confirmation e-mail is sent, and the related data logged, on the basis of our legitimate interest to prove that your subscription was processed properly in accordance with Art. 6 (1) lit. f GDPR and the newsletter is sent out on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
g) Buyer profile
If you wish to offer us your property for sale, we process your contact details within the scope of pre-contractual correspondence and/or for concluding the agreement.
Your data is processed on the basis of Art. 6 (1) lit. b GDPR.
h) Video surveillance in our properties
We occasionally use video surveillance in our properties. The monitored areas are marked with the following pictogram and information:
We use video surveillance to protect against burglaries and vandalism. The legal basis for this is our legitimate interest in accordance with Art. 6 (1) lit. f GDPR regarding the protection of property against vandalism. All persons present in the marked area are recorded. All recordings are automatically deleted after 30 days.
5. Cookies, website analysis and marketing
We use cookies to enable certain functions. These are small data packages that are stored on your device and exchanged with other providers. Some of the cookies used by us are deleted once you close your browser (session cookies). Other cookies remain on your device and make it possible to recognise your browser when you next visit (persistent cookies). Data processing activities due to cookies that serve the sole purpose of creating the functionality of our website are therefore performed on the basis of our legitimate interests in accordance with Art. 6 (1) lit. f GDPR.
You can delete all cookies stored on your device and adjust the settings of the popular browsers to prevent the installation of cookies. If you choose to do this, you may have to readjust the settings at every visit to this website. Some of the functions may also not be available to you.
We use additional services in connection with the following functionalities:
We use various services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter referred to as “Google”) on our website. Google may transfer data to the USA during this process. For such transfers Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, which processes the data in this case, has agreed to comply with the EU-US Privacy Shield:
For further information on data protection please go to: https://policies.google.com/privacy?hl=de&gl=de
We use the Google Analytics tracking tool on our website. It records and systematically analyses the interactions of website visitors primarily with the help of cookies. The following data is stored when you visit the website:
3 bytes of the IP address of the accessed system of the website visitor (anonymised IP address)
Website from which the user accessed the page on our website (referrer)
Sub-pages that are accessed form the website
Frequency of the website access
This data is transferred and stored on a Google server located in the USA. We use Google Analytics with the “anonymizeIp()” extension. This abbreviates the IP addresses prior to transferring them to the server in the USA (e.g. 192.158.79.***). This usually makes it impossible to create a direct link to a person. In particular, it is no longer possible to allocate the accessed computer or device of the website visitor. The unabbreviated IP address is only transferred to a server in the USA and abbreviated there in exceptional circumstances.
We use Google Analytics for analysing your use of the website, compiling website activity reports for the website operators, providing additional services related to the website use and improving the website’s user friendliness.
The data is processed on the basis of our prevailing interest in the optimal marketing of our website in accordance with Art. 6 (1) lit. f GDPR. Google never links your IP address to other Google data.
You can object to the processing of your data at any time and with future effect by using the deactivation add-on for browsers by Google Analytics which can be downloaded at https://tools.google.com/dlpage/gaoptout?hl=de.
Please read the additional information on the use of data by Google in the Google partner network at: https://www.google.com/intl/de/policies/privacy/partners/
6. Embedded external content
We use dynamic third-party content for optimising the display and offers of our website. When you visit our website, an application programming interface (API) automatically sends a query to the server of the respective content provider during which certain log data (i.e. IP address of the user) is transferred. The dynamic content is then transferred to, and displayed on, our website.
We use Google Maps by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on our website to provide you with an interactive map. When displaying the map, data, including your IP address and location, is transferred to and stored on Google servers located in the USA. This data is processed on the basis of our prevailing interest in the optimal marketing of our website in accordance with Art. 6 (1) lit. f GDPR.
For exceptional circumstances in which Google transfers data to the USA, Google- LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA has agreed to comply with the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
We use external fonts by Google Fonts to create a more appealing website look. When you visit our website, these fonts are loaded from the servers of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Google does not store any cookies in your browser to do so. According to the information provided to us, however, the IP address of the user’s device is transferred to, and stored by, Google. This data is processed on the basis of our prevailing interest in the optimal marketing of our website in accordance with Art. 6 (1) lit. f GDPR.
We store your personal data only as long as it is required for the purposes for which it is processed or until you withdraw your previous consent for us to do so. The retention period for certain data may be up to 10 years in the event of us having to comply with statutory retention periods, regardless of the processing purposes.
You can request free-of-charge information on all of your personal data that we have stored at any time.
b) Correction, deletion and restriction of processing (block), objection
Should you no longer agree to the storage of your personal data, or should your data have become incorrect, we shall initiate its deletion or block upon your corresponding request or make the respective corrections (if this is possible in accordance with the applicable laws). The same applies if you wish for us to restrict the processing of your data in the future. You have the right to object, in particular, if your data is required for the performance of a task that is in the interest of the public or in our legitimate interest as well as any profiling based thereon. You also have the same right to object to data processing for the purpose of direct advertising.
By your request, we shall provide you with your data in a standard, structured and machine-readable format so that you can transfer it to another controller.
d) Right to revoke your consent with future effect
You can revoke any consent you may have given with future effect. Your revocation shall not affect the legitimacy of the processing up to the date of revocation.
e) Right to complain
You may, at any time, complain to a supervisory authority with regard to your rights as the data subject:
The above rights do not apply to data that we cannot use for identifying the data subject, such as data that has been anonymised for analysis purposes. Information, deletion, blocking, correction and transfer to another company with regard to this data may be possible if you provide us with additional information that enables us to identify the data subject.
9. Assertion of your rights as the data subject
Should you have questions regarding the processing of your personal data as well as information on, the correction, blocking and deletion of, and objection to data, or wish to transfer the data to another company, please contact datenschutz@the-flag.de.