Aviv Group Our company Classified Portals Ventures & Growth Aviv group > Data and privacy Data and privacy Privacy policy of AVIV Group We are very pleased about your interest in AVIV Group. To be able to offer AVIV Group, we of course require certain data about you. We take the protection of personal data very seriously and always process it in compliance with applicable data protection regulations, in particular the European Union General Data Protection Regulation (GDPR). With this privacy policy, we aim to fully inform you about how, why and to what extent we process personal data, and what your rights are as a data subject. Data controller and general information Your data will be processed by AVIV Group GmbH, Axel-Springer-Str. 65, 10969 Berlin, phone: +493025910, email: contact@avivgroup.com (service provider for the purposes of the Act for Telecommunication Media Services (TMG) and data controller for the purposes of the General Data Protection Regulation (GDPR). When we use terms such as “we” or “us”, this is who we are referring to. We consider AVIV Group to mean any sub-pages, content and functions (for instance discussion forums, prize draws) present in this document http://www.aviv-group.com, http://www.aviv-group.de, http://www.aviv-group.be, http://www.avivgroup.be, http://www.avivgroup.fr, http://www.aviv-group.co.uk, http://www.aviv-group.be, http://www.aviv-group.fr, http://www.aviv-group.net, http://www.aviv-group.ch, http://www.aviv-group.at, http://www.aviv-group.eu .Individual elements of AVIV Group are also referred to as “online services” below. The same is meant wherever we refer to a website. Our services are intended for the general public, and not for children. We do not knowingly collect personal data from users who are regarded as children under applicable national legislation. Collection and processing of personal data You can usually use online services that do not require payment or registration without providing personal data. In certain cases, however, we may process personal data listed under point 3. This is only done as is necessary to provide a functioning website, our content and our services. We also process personal data in connection with the use of AVIV Group insofar as you provide such data voluntarily, for instance for the purpose of registration, a prize draw, sending us an enquiry, submitting an application to us, subscribing to a publication, or some other legal basis (see point 4). If you do not wish to provide personal data, you will unfortunately not be able to make use of our services or will only be able to use them to a limited degree. Categories of processed data As soon as you make use of AVIV Group, our system will automatically collect information from the computing device accessing the service. The following data may be collected by way of example: – Information about the browser type and version used – The operating system of the user – Mobile device ID – Shortened IP address of the user – Date and time of the access – Web analysis data / pseudonymised user profiles (cookie ID, ad ID, etc.) – Websites from which the users access our website – Websites that the users access from our website We also process the following personal data insofar as there is a contract in effect between you and us or if you have provided us with the data by other means: – Contact details (telephone number, email address) Legal basis and purposes of processing We only process your data on the basis of one or several potential legal bases. Pursuant to the GDPR, personal data may be processed in particular under the terms of a contract or to perform pre-contractual activities, if consent is provided, if there is a legitimate interest or compelling statutory cause, or if it becomes necessary to protect vital or public interests. On the internet, every device requires a unique address to transmit data, known as an IP address. This IP address must be stored, even if only temporarily, for technical reasons in order to enable the website to be downloaded to the user’s end device. Unless stipulated otherwise in this privacy policy, we shorten IP addresses prior to any processing and only process IP addresses in anonymised form. On the basis of the truncated IP address, we can display content of regional interest on all our websites that are accessed from a particular region. Geolocation, which is the ability to determine where a certain visitor is located, is fundamentally only applied with the use of the anonymised IP address and only allows geographical location down to specific federal states or regions. The geographical information acquired in this manner cannot under any circumstances be used to establish a user’s specific location. Our servers will also store your IP address for a period of 14 days for internal security purposes (Art. 6 para. 1 point f GDPR). For processing activities encompassed by none or several of the aforementioned legal bases, processing is performed insofar as it is necessary to uphold a legitimate interest and insofar as this interest is not outweighed by your interests, fundamental rights or freedoms following a thorough consideration of the interests as a whole. A legitimate interest can be assumed if the data subject is a customer of the data controller. If personal data is processed on this basis, our particular legitimate interest here is in the performance of our business activities for the benefit of all of our employees and our shareholders. Our legitimate interest in being able to offer you tailored products, informing you about our products, news and quality features, and continuously improving our services and products with a view to increasing our revenue provides the legal basis for processing by means of web/app analysis. See point 9 for details on Web analytics tools. You can object to processing performed on the basis of a legitimate interest at any time (see point 13). If data is processed for a purpose other than that specified upon collection, a compatibility test is performed pursuant to Art. 6 para. 4 of the GDPR. Continued processing is then only permitted if the original purpose is compatible with the new purpose or if this processing is permitted on a specific legal basis. Recognised compatible purposes include the establishment, exercise or defence of legal claims under civil law, unless outweighed by an interest of the data subject, in which case we will inform you about the change in purpose. If the new purpose is not compatible with the purpose specified upon collection, the data will be collected again on a new legal basis. We will also inform you about the change in purpose in this case. Place of processing We personally will not transmit your personal data to countries outside of the European Economic Area, except where permitted by the GDPR. We cannot know and cannot influence whether third parties with whom you have concluded a separate contractual agreement (for instance with Facebook, if you have a Facebook account) transmit data to countries outside of the European Economic Area. We also process data in countries outside of the European Economic Area (“EEA”). To ensure the protection of your personal rights, including in connection with such data transmissions, we use the standard contractual clauses of the European Commission in accordance with Art. 46 para. 2 point c of the GDPR when establishing contracts with recipients in Third Countries. These are available on demand at http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:EN:PDF, and these documents can also be requested from us by contacting us using one of the methods specified below. Origin of data In certain cases, we also receive data because you have consented to its transmission to us. Transmission of your data to third parties We will only transmit your personal data to third parties if transmission is required to comply with our contractual obligations to you if this evidently needs to be done through or jointly with another provider (e. g. partnerships), if we are permitted or required by law to transmit the data in any other fashion, or if you have provided us with the corresponding consent. To provide our service, selected personal data may be transmitted to certain departments within our company, including employees of the Accounting, Product Management, Marketing and IT departments. In certain cases we also employ external service providers or affiliates commissioned by us to process data on our behalf on the basis of instructions. We ensure that such service providers are contractually bound by the strict terms of the GDPR as data processors and that they are prohibited from using your data for any other purposes. Data processors employed by us provide the following services in particular: web/app analytics tools. See point 9 for details on Web analytics tools. Data is transmitted to data processors on the basis of Art. 28 para. 1 of the GDPR, and also on the basis of our legitimate interest in economic and technical advantages afforded by the employment of specialist data processors as permitted by Art. 6 para. 1 point f of the GDPR. Insofar as we are required to do so by law or are permitted to do so under data protection law, we will transmit personal data to public authorities such as the police or public prosecution service (Art. 6 para. 1 point c GDPR). This data is transmitted on the basis of our legitimate interest in preventing abuse, prosecuting criminal acts and securing, establishing and enforcing legal claims, unless outweighed by your rights and interests in the protection of your personal data, Art. 6 para. 1 point f of the GDPR. Cookies and similar technologies We use cookies and similar technologies for the purposes of advertising, market research, needs-based design and to ensure the functionality of our website (including the display and personalisation of content and advertising, use of social media, contract performance in the case of free-of-charge and paid offerings, IT security and fraud prevention). Cookies are small files that your browser places in a folder designated for this purpose on your device. This makes it possible, for instance, to determine whether you have visited a website before. With your consent, cookies can also be used to store account details for an online service, meaning that you do not need to enter these account details every time you open the website. Many cookies contain what is known as a “cookie ID”, which is a unique identifier for the cookie. It consists of a string of characters which websites and servers can associate with the specific web browser in which the cookie has been stored. This enables visited websites and servers to differentiate between the specific browser of the data subject and other web browsers containing different cookies. A specific web browser can be recognised and identified using the unique cookie ID. Without additional information, cookies cannot be used to identify you personally. This website also uses third-party cookies for the above-mentioned reasons. The provider of a third-party cookie is then the controller within the meaning of Article 4 No. 7 GDPR. More information about the different cookies can be found at the appropriate place in this privacy policy. Advertisements are usually delivered by third-party providers. These may use information on your visits, provided that your device configuration allows this, so that advertisements on products and services that may be of interest to you are displayed. Specific contact details such as your name, postal address, email address or telephone number will not be transmitted under any circumstances. Unless indicated otherwise, the legal basis is Art. 6 para. 1 point f GDPR and Section 15 para. 3 Telemedia Act (TMG). Where consent is given within the meaning of Art. 6 para. 1 point a GDPR, you have the right to withdraw this at any time, without this having any effect on the lawfulness of processing previously undertaken on the basis of consent before it was withdrawn. In the event of legitimate interest within the meaning of Art. 6 para. 1 point f GDPR, our legitimate interest lies in particular in the purposes mentioned above, and in the fundamental purposes of our business operations and journalism. Where the legal basis for using cookies is our legitimate interest (Art. 6 para. 1 point f GDPR) or Section 15 para. 3 TMG, you can prevent cookies from being set by our website at any time by configuring your chosen web browser accordingly, thereby blocking cookies. Previously set cookies can also be deleted at any time using a web browser or another software solution. This is possible in all standard web browsers. If you block cookies in your chosen web browser, it may not be possible for you to use all of the functions of our website in full. You also have the option of blocking individual cookies. More information can be found at the appropriate place in this privacy policy. Web analytics tools In order to continuously improve our services and adapt them to the interests of our users, and in order to display usage-based online advertising, we make use of a number of analysis services that collect and analyse data on our website to your usage behaviour on our behalf. Where these service providers are not controllers within the meaning of data privacy law, they always process the user data under instruction on the basis of a data processing agreement (Art. 28 para. 3 GDPR). The legal basis for pseudonymised data processing is Art. 6 para. lit f GDPR resp. section 15 para. 3 sentence 1 Telemedia Act (TMG) unless indicated otherwise in this privacy policy. You can deactivate the individual analysis services at any time with effect for the future and opt out of data processing. Specific information on the individual analysis services employed by us can be found below: Google Analytics We have integrated Google Analytics (with anonymisation function). Google Analytics is a web analytics tool from Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Irland. Web analytics is the collection and analysis of data about the behaviour of website visitors. A web analytics tool collects, among other things, data about the website from which a data subject arrived at particular website (known as the referrer), the subpages of the website that were accessed and how often and for how long a subpage was looked at. Web analytics is primarily used to optimise a website and for cost-benefit analysis of online advertising. For web analytics via Google Analytics we use the suffix “_gat._anonymizeIp”. This means that the IP address of the data subject’s Internet connection is truncated and anonymised by Google if our websites are accessed from a Member State of the European Union or from a contracting state of the Agreement on the European Economic Area. The purpose of the Google Analytics component is to analyse visitor flows on our website. Among other things, Google uses the data and information obtained to analyse the use of our website, to compile online reports for us detailing activities on our websites, and to provide other services connected with the use of our website. Google Analytics sets a cookie on the data subject’s IT system. An explanation of what cookies are is provided above. Setting the cookie enables Google to analyse the use of our website. Each time one of the individual pages of this website is accessed, which is operated by us and incorporates a Google Analytics component, the web browser on the data subject’s IT system is automatically prompted by the respective Google Analytics component to transmit data to Google for the purposes of online analysis. As part of this technical process, Google gains knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to track the origin of visitors and clicks, and to subsequently enable commission to be calculated. Using the cookie, personal information is stored, such as time and location of access and the frequency of visits to our website by the data subject. Each time our website is visited, this personal data, including the IP address of the Internet connection used by the data subject, is transferred to Google. This personal data is stored by Google. In some cases, Google may share the personal data collected through this technical process with third parties. The data subject can prevent cookies from being set by our website at any time, as explained above, by configuring the web browser they use to block cookies. Configuring the web browser in this way will also prevent Google from setting a cookie on the data subject’s IT system. A cookie already set by Google Analytics can also be deleted at any time using a web browser or another software solution. It is also possible for the data subject to opt out of Google Analytics collecting data generated by the Google Analytics cookie in relation to use of this website and processing such data, thereby preventing this. To do so, the data subject must download and install a browser add-on using the link http://tools.google.com/dlpage/gaoptout?hl=en This browser add-on notifies Google Analytics via JavaScript that no data or information about the website visits is allowed to be transmitted to Google Analytics. Google regards installation of the browser add-on as opting out. If the data subject’s IT system is erased, formatted or re-installed at a later date, the browser add-on must be re-installed by the data subject to block Google Analytics. If the browser add-on is uninstalled or disabled by the data subject or someone else within the data subject’s sphere of control, the browser add-on can be re-installed or enabled again. More information and the current Google privacy policy is available at https://policies.google.com/privacy?hl=en&gl=en and at https://www.google.com/analytics/terms/gb.html. Further details on Google Analytics can be found at the link https://www.google.com/intl/en_en/analytics/. Social networks You can also find us on the social networks of external companies such as Facebook and Twitter. We have also integrated certain functions of these networks into our own online services. However, it is only possible to use either of them if you are registered and logged in to the relevant social network. Please note that use of each of the social networks fundamentally is governed by the relevant terms of service and privacy policies of the respective companies and we have no influence over these. Social Plugins Social network plugins are integrated on this website. The operator of each social network plugin can be recognized by the logo associated with the relevant social network plugin. We make it easier for you to interact with the respective social network by including the social network plugin. If you click on a social network plugin, you will be redirected to the respective social network’s website (like a link). No personal data is transmitted to the operator of the social network plugin during this operation. Unless otherwise indicated, the operator of the social network plugin, and the respective social network, is the exclusive controller within the meaning of Art. 4 para. 7 GDPR for data processing purposes. Other services We use additional third-party services referred to below for purposes of, and in pursuit of our interests in, ensuring the functionality of our website and/or our app and in order to display content that may be of interest to you. The provider of each respective service is the controller for data processing purposes within the meaning of Art. 4 para. 7 GDPR. Unless indicated otherwise, the legal basis is Art. 6 para. 1 point f GDPR and section 15 para. 3 TMG. Jetpack für WordPress We have integrated Jetpack into this website. Jetpack is a WordPress plug-in, providing additional functions to operators of websites that are built on WordPress. Among other things, Jetpack gives the website operator an overview of visitors to the site. By displaying related articles and publications or the option of sharing content on the site, visitor numbers can also be increased. Furthermore, security functions are integrated into Jetpack and therefore a website using Jetpack is better protected against brute force attacks. Jetpack also optimises and speeds up the loading of images incorporated into the website. The Jetpack plug-in for WordPress is operated by Automattic Inc., 132 Hawthorne Street, San Francisco, CA 94107, USA. The operating company uses tracking technology from Quantcast Inc., 201 Third Street, San Francisco, CA 94103, USA. Jetpack sets a cookie on the data subject’s IT system. An explanation of what cookies are is provided above. Each time one of the individual pages of this website is accessed, which is operated by us and incorporates a Jetpack component, the web browser on the data subject’s IT system is automatically prompted by the respective Jetpack component to transmit data to Automattic for analysis purposes. As part of this technical process, Automattic gains knowledge of data that is then used to create an overview of website visits. The data obtained in this way is used to analyse the behaviour of the data subject who accessed our website and is analysed with the aim of improving and optimising the website. The data collected through the Jetpack component is not used to identify the data subject unless separate and express consent to do so has been obtained from the data subject beforehand. Quantcast also gains knowledge of the data. Quantcast uses the data for the same purposes as Automattic. The data subject can prevent cookies from being set by our website at any time, as explained above, by configuring the web browser they use to block cookies. Configuring the web browser in this way will also prevent Automattic/Quantcast from setting a cookie on the data subject’s IT system. Cookies already set by Automattic can also be deleted at any time using a web browser or another software solution. It is also possible for the data subject to opt out of Automattic/Quantcast collecting data generated by the Jetpack cookie in relation to use of this website and processing such data, thereby preventing this. To do so, the data subject must click the Opt Out button at https://www.quantcast.com/opt-out/ to set an opt-out cookie. By opting out, an opt-out cookie is placed on the IT system used by the data subject. If the cookies are deleted from the data subject’s system after they have opted out, the data subject must set a new opt-out cookie using the link again. When the opt-out cookie is set, however, the full functionality of our websites might no longer be available to the data subject. The current Automattic privacy policy is available at https://automattic.com/privacy/. The current Quantcast privacy policy is available at https://www.quantcast.com/privacy/. Storage duration We only store personal data as long as we are authorised to do so and as long as the purpose of processing is still relevant. Statutory retention periods govern how long personal data is stored for. Once this period has expired, the corresponding data is routinely erased, provided it is no longer needed to initiate or perform a contract. Contact details and your rights as a data subject Should you have any queries or comments on data protection and privacy or wish to exercise your rights as a data subject, please contact our data protection officer at any time: AVIV Group GmbH Datenschutz Axel-Springer-Str. 65 10969 Berlin dataprivacy@aviv-group.com ▫ Information and rectification You can receive information at any time and at no charge about whether we are processing personal data related to you and also about which information we are specifically storing about you. You are also entitled to receive a copy of the stored information. You can also have errors in your data corrected and missing information completed. ▫ Erasure, restriction of processing and “right to be forgotten” You can request that your data be erased and its processing restricted. Please note that statutory retention obligations are in effect for contracts relating to paid services (such as the purchase of a subscription to AVIV Group) and that we will therefore not always be able to fully erase your data completely in all cases. In this case, your data will be labelled to the effect that future processing should be restricted. ▫ Data portability Where applicable, you also have the right to have your personal data transmitted to you or to another data controller in a structured, standardised and machine-readable format, as long as processing is performed on the basis of consent or contract using automated procedures. This does not apply, however, where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. You also have the right to have the personal data transmitted directly from one data controller to another, provided that it is technically feasible to do so and does not infringe upon the rights and freedoms of other persons. ▫ Withdrawal of consent, objecting to processing You can withdraw your previously-given consent at any time with effect for the future by contacting the aforementioned address. Moreover, you have the right to object to the processing of your personal data at any time (where such processing is based on a legitimate or public interest) for reasons arising from your particular circumstances. This also applies to profiling activities based on these provisions. If such an objection is received, we will cease to process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, of if the processing is for the establishment, exercise or defence of legal claims. If we are processing personal data for the purpose of direct marketing, you have the right to object to the processing of your personal data at any time for the purpose of such marketing by contacting the aforementioned address. This also applies to profiling insofar as it is connected with such direct marketing. You also have the right to file an objection for reasons arising from your particular circumstances against processing of your personal data that we are engaged in for scientific, historical research or statistical purposes, unless such processing is required to perform a task that is in the public interest. ▫ Right of complaint You also have the right to submit a complaint to the competent supervisory authority and to seek legal remedies. The supervisory authority to whom the complaint was submitted will notify the complainant about the status and result of their complaint, including the option of seeking a legal remedy through a court of law. ▫ Existence of automated decision-making processes We do not perform any automated decision-making or profiling. Last revised: December 17, 2019 Contact Get in touch! We'd love to hear from you. Here's how you can reach us... contact@aviv-group.com Linkedin Data & privacy Disclaimer Imprint We'll assume you're ok with this, but you can opt-out if you wish. Cookie settingsACCEPT