Source: https://www.italimmo.com/data-protection-en.htm
Timestamp: 2019-03-25 12:56:04
Document Index: 40706185

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 46']

Italimmo - Fritsch & IP Consult UG GbR
The specialist for selected properties in Tuscany, Umbria and the Marches
1. Who is responsible for the processing of data and who can I contact?
Fritsch & IP Consult UG GbR (hereinafter also referred to as "GbR"), An der Beermahd 21, 82229 Seefeld, Telephone: +49 (0) 8152 982919, E-mail: info@italimmo.com.
We process personal data which we receive from our clients in connection with our business relationship. Moreover, we process personal data – to the extent necessary for the performance of our services - legitimately obtained (for example for the execution of orders, for the fulfillment of contracts or on the basis of your given consent) from other companies or from any other third parties (e.g. Federal Central Tax Office). Furthermore, we process personal data legitimately obtained from publicly accessible sources (such as registers of commercial establishments and associations, press, media, internet) which we are permitted to process.
We process the above mentioned personal data in accordance with the provisions of the EU General Data Protection Regulation (DSGVO) and the German Federal Law on Data Protection (BDSG):
a. For the fulfillment of contractual obligations (Art. 6 (1) b) DSGVO)
b. Within the scope of the balancing of interests (Art. 6 (1) f) DSGVO)
c. As a result of your consent (Art. 6 (1) a) DSGVO)
To the extent you have granted us consent to the processing of personal data for speciﬁc purposes (e.g. circulation of data within the group and/or to your investment advisor), such processing is legitimate on the basis of your consent. Any consent granted may be revoked at any time. This also applies to the revocation of declarations of consent that are granted to us prior to the effective date of the DSGVO, i.e., prior to 25 May 2018. Please be advised that the revocation shall only have effect for the future.
d. On the basis of statutory regulations (Art. 6 (1) c) DSGVO) or in the public interest (Art. 6 (1) e) DSGVO)
Moreover, we, as a company, are subject to various legal obligations, i.e. statutory requirements (such as regulatory law, the Money Laundering Act, Securities Trading Act, tax laws) as well as to supervisory requirements (e.g. the Federal Financial Supervisory Authority). The purposes of processing include, among others, checking identity, prevention of fraud and money laundering, compliance with obligations of control and reporting under tax law and the assessment and management of risks in GbR.
Within GbR, only those units will have access to your data who require them for the fulfillment of the contractual obligations.
Data transfer to countries outside the European Union or the EEA (so-called third countries) will take place to the extent required for the execution of your orders (such as payment and security orders), and to the extent required by law (such as obligatory reporting under tax law) or you have given us your consent. In case service providers are used in third countries, such are obligated, in addition to written instructions, to comply with the level of data protection in Europe by way of conclusion of EU standard contractual clauses or other agreements stated in Art. 46, 47 DSGVO. Insofar as your personal data are transferred to a third country, you can be provided with a copy of the respective agreements at any time upon written request. Please address your request to our internal data protection officer (see section 1.).
Every data subject has the right of access pursuant to Article 15 DSGVO, the right to rectification pursuant to Article 16 DSGVO, the right to erasure pursuant to Article 17 DSGVO, the right to restriction of processing pursuant to Article 18 DSGVO, the right to object pursuant to Article 21 DSGVO and the right to data portability pursuant to Article 20 DSGVO. As far as the right of access and the right to erasure are concerned, the restrictions pursuant to Secs. 34 and 35 Federal Data Protection Act are applicable. Moreover, there is a right to appeal to a competent data protection supervisory authority (Article 77 DSGVO in conjunction with Sec. 19 Federal Data Protection Act). The competent supervisory authority is the Bavarian Data Protection Authority, Promenade 27, 91522 Ansbach.
Your express consent to the processing of personal data granted to us may be revoked at any time by informing us accordingly. This also applies to the revocation of declarations of consent given to us before the effective date of the DSGVO, i.e. before 25 May 2018. Note that such revocation will be valid only for the future. Processing that took place before the date of revocation is not affected.
As a matter of principle, we do not use fully automated decision-making processes pursuant to Article 22 DSGVO. In the event that we should use such processes in individual cases, we will inform you accordingly if required by law.
10. nformation on your rights of objection
You have the right to object, for reasons relating to your particular situation, to the processing of personal data concerning you, that occurs on the basis of Article 6 (1) f) DSGVO, at any time (data-processing on the basis of balancing of interests).
Such an objection can be submitted in writing to the business address or sent by email to info@italimmo.com.
Data Protection Notice (Data Protection Statement) for using the website of GbR
The web pages of GbR can be used without having to specify any personal data. However, should a data subject wish to use special services of our company through our website, the processing of personal data may, however, be required. Should the processing of personal data be necessary and there is no legal basis for such processing, we will generally obtain consent of the data subject.
The processing of personal data, such as the name, address, email address or telephone number of a data subject will always be in accordance with the General Data Protection Regulation (DSGVO) and the country-specific data protection laws applicable to GbR. The purpose of this data protection statement is to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Moreover, this statement also informs data subjects of the rights they are entitled to.
GbR as data controller has implemented numerous technical and organisational measures to ensure the best possible protection of personal data processed through this website. However, the electronic transmission of data can, in principle, have security gaps, meaning that absolute protection cannot be guaranteed. For this reason, every data subject is free to transfer personal data to us through alternative means, for example, by telephone.
Cookies are used on GbR’s web pages. Cookies are text files that are stored on a computer system through a web browser.
Through the use of cookies, GbR can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.
By means of a cookie, the information and offers on our website can be optimised to the user’s advantage. Cookies allow us, as mentioned above, to recognise our website users. The purpose of this recognition is to make it easier for users to utilise our website. The user of a website that uses cookies does, for example, not have to enter access data each time the website is accessed, because this is taken over by the website and the cookie that is stored on the user's computer system.
Each time the website of GbR is accessed by a data subject or an automated system, it collects a series of general data and information. Such general data and information is stored in the server log files. Collected may be (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites which are chosen by an accessing system on our website, (5) the date and time of access to the website, (6) an internet protocol address (IP address), (7) the internet service provider of the accessing system, and (8) any other similar data and information that is intended to be used for threat defence in the event of attacks on our information technology systems.
When using these general data and information, GbR does not draw any conclusions about the data subject. Rather, this information is required to (1) deliver the content of our website correctly, (2) optimise the content of our website as well as its advertisement, (3) ensure the long-term operational capability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. Therefore, GbR analyses anonymously collected data and information statistically and with the aim of increasing the data protection and data security of our company in order to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
Due to legal provisions, the website of GbR contains information that enables a quick electronic contact to our company, as well as direct communication with us, which also includes a general address of electronic mail (e-mail address). If a data subject contacts the data controller by e-mail or through a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of such personal data to any third parties.
The section “Data Protection Notice (Data Protection Statement) for using the website of GbR” of GbR’s Data Protection Statement has been generated by the Data Protection Statement Generator of the Deutsche Gesellschaft für Datenschutz [German Association for Data Protection] that was developed in cooperation with the media law attorneys WILDE BEUGER SOLMECKE.