Privacy Policy
Data protection
Status of the data protection declaration: March 2020
introduction
This data protection declaration clarifies the type, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online offer and the offers, contractual services, websites, mobile applications, functions and content connected to it, as well as external online presences ( hereinafter collectively referred to as "online offer"):
- In the first section of the data protection declaration, you will find information on who is responsible for processing and an overview of our processing operations.
- In the second section you will find information on your rights, the relevant legal norms and general information on our processing of data.
- The third section contains information on the individual processing operations . This section is divided into other areas, such as our core services, range measurement or marketing.
- The fourth section contains explanations and descriptions of the terms used in the data protection declaration. This means that if you are not familiar with the terms used (such as “personal reference” or “cookie”, please refer to the fourth section. All other terms used (such as “responsible person” or “user”) are to be understood as gender-neutral .
- In the last section you will receive final information.
Section I - Controller and overview of data processing
MORE RESPONSIBLE
DG Investment GmbH
Friesenplatz 4
50672 Cologne Germany
Managing Director: Dogan Gündogdu
Email: d g @ emlak 24 .com Internet: www.emlak24.com
Tel .: 0049 162 9574068
Registered at Cologne Local Court Responsible for content according to § 55 paragraph 2 RStV: Dogan Gündogdu
Commercial register: HRB 100922 Tax number: 219 51 17 14 58
The person responsible is also referred to below as "we" or "us".
CONTACT INFORMATION DATA PROTECTION OFFICER:
DG Investment GmbH
Friesenplatz 4
50672 Cologne Germany
Managing Director: Dogan Gündogdu
Email: dg @ emlak 24 .com Internet: www.emlak24.com
Tel .: 0049 162 9574068
DESCRIPTION OF OUR CORE SERVICES:
EMLAK24 offers comparison services on the Internet. Interested parties can make comparative inquiries about specific products and services. The comparative inquiries will then be forwarded to companies, intermediaries or other providers of these products or services (collectively referred to as “providers”), who in turn can submit offers to those interested.
By sending the comparison request ( by clicking on the "Offers Compare" button), the prospective explain agree that we may process their name and their contact and inquiry data to process your request, prepare for quotation and selected Transmit provider.
CANCELLATION POSSIBILITY:
The consent can be revoked informally at any time, e.g. by e-mail to dg @ emlak 24 .com or by letter to DG Investment GmbH, Friesenplatz 4 50672 Cologne, with effect for the future.
ARTE N OF DATA PROCESSED:
- Inventory data (e.g., names, addresses).
- Contact details (e.g., email addresses, telephone numbers).
- Content data (e.g., information on comparison requests).
- Contract data (e.g., content of the comparison inquiries, mediated providers).
- Usage data (e.g., websites visited, interest in content, access times).
- Meta / communication data (e.g., device information, IP addresses).
- Applicant data (e.g., names, contact details, qualifications, application documents).
PROCESSING OF SPECIAL CATEGORIES OF DATA (ART. 9 (1) GDPR):
Basically, no special categories of data are processed, apart from health data, if these are supplied by the user to the processing, e.g. with information on desired comparative offers (e.g. information on mobility aids).
CATEGORIES OF PEOPLE AFFECTED:
- Interested persons.
- Provider, business partner.
- Visitors and users of the online offer.
- Applicants.
In the following, we will also refer to those affected as “users”.
PURPOSE OF PROCESSING:
- Provision and implementation of comparison and mediation services.
- Providing the online offer, its content and functions.
- Provision of contractual services, service and customer care.
- Answering contact inquiries and communicating with users.
- Marketing, advertising and market research.
- Safety measures.
AUTOMATED DECISION IN INDIVIDUAL CASES (ART. 22 GDPR):
We do not make automated decisions in individual cases.
Section II - Rights of the data subject, legal basis and general information
Rights of the data subjects
You have the right to request a confirmation as to whether the data in question are being processed and for information about this data as well as for further information and a copy of the data in accordance with Art. 15 GDPR.
You have accordingly. Art. 16 DSGVO the right to request the completion of the data concerning you or the correction of the incorrect data concerning you.
In accordance with Art. 17 GDPR, you have the right to request that the data in question be deleted immediately, or alternatively, in accordance with Art. 18 GDPR, to restrict the processing of the data.
You have the right to request that the data concerning you, which you have provided to us, be received in accordance with Art. 20 GDPR and to request their transmission to other responsible persons.
You have also gem. Art. 77 GDPR the right to file a complaint with the responsible supervisory authority.
Right of withdrawal
You have the right to give consent in accordance with Revoke Art. 7 Para. 3 GDPR with effect for the future.
Right to object
You can object to the future processing of your data in accordance with Art. 21 GDPR at any time. The objection can be made in particular against processing for direct marketing purposes.
Cookies and right to object in direct marketing
We use temporary and permanent cookies, ie small files that are stored on the users' devices (for an explanation of the term and the function, see the “Definitions of terms ” section of this data protection declaration ). Some of the cookies are used for security or are necessary for the operation of our online offer (e.g. for the presentation of the website) or to save the user decision when the cookie banner is confirmed. In addition, we or our technology partners use cookies for range measurement and marketing purposes, about which users are informed in the course of the data protection declaration.
If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.
A general objection to the use of cookies used for online marketing purposes can be obtained from a number of services, especially in the case of tracking, via the US website http://www.aboutads.info/choic... or the EU Page http://www.youronlinechoices.com/. Furthermore, cookies can be saved by switching them off in the browser settings. Please note that not all functions of this online offer can then be used.
Only automated data processing
In accordance with Art. 22 GDPR, you have the right not to be subjected to a decision based solely on automated processing - including profiling - which has legal effect on you or similarly significantly affects you.
We would like to inform you that we do not carry out exclusively automated data processing.
Deletion of data and archiving obligations
The data processed by us is deleted in accordance with Art. 17 and 18 GDPR or its processing is restricted. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and there are no legal storage obligations to prevent deletion. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be kept for commercial or tax law reasons .
According to legal requirements, storage is carried out in particular for 6 years in accordance with Section 257 (1) HGB (trading books, inventories, opening balance sheets, annual accounts, trading letters, accounting documents, etc.) and for 10 years in accordance with Section 1 47 (1) AO (books, records, Management reports, booking vouchers, commercial and business letters, documents relevant for taxation, etc.)
Changes and updates to the data protection declaration
We ask you to inform yourself regularly about the content of our data protection declaration. We will adapt the data protection declaration as soon as the changes in the data processing carried out by us make this necessary. We will inform you as soon as an act of cooperation on your part ( e.g. consent) or other individual notification becomes necessary as a result of the changes .
Relevant legal bases
In accordance with Art. 13 GDPR, we will inform you of the legal basis for our data processing. Unless the legal basis is mentioned in the data protection declaration, the following applies: The legal basis for obtaining consent is Art. 6 Para. 1 lit. a and Art. 7 GDPR, the legal basis for the processing to fulfill our services and implementation of contractual measures as well as answering inquiries is Art. 6 Para. 1 lit. b GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6 Para. 1 lit. c GDPR, and the legal basis for processing to protect our legitimate interests is Art. 6 Para. 1 lit. f GDPR. In the event that the vital interests of the data subject or of another individual may require the processing of personal data type is used. 6 para. 1 lit . d GDPR serves as the legal basis.
The basics for commercial communications outside of business relationships, in particular via post, telephone, fax and email, are contained in § 7 UWG.
Security of data processing
We take appropriate measures in accordance with Art. 32 GDPR, taking into account the state of the art, implementation costs and the type, scope, circumstances and purposes of processing, as well as the different probability and severity of the risk to the rights and freedoms of natural persons technical and organizational measures to ensure a level of protection appropriate to the risk; The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling the physical access to the data, as well as the access, input, transfer, securing availability and its separation. We have also set up procedures to ensure that data subjects' rights are exercised, data is deleted and data is reacted to if the data is at risk. We also take the protection of personal data into account when developing or selecting hardware, software and processes, in accordance with the principle of data protection through technology design and data protection-friendly default settings (Art. 25 GDPR).
The security measures include, in particular, the encrypted transmission of data between your browser and our server.
With regard to data protection, employees are bound to confidentiality, instructed and instructed, as well as possible liability consequences.
Disclosure and transmission of data
If we disclose data to other people and companies (processors or third parties) as part of our processing, transmit them to them or otherwise give them access to the data, this will only be done on the basis of legal permission ( e.g. if the data is transmitted to third parties) as required by payment service providers in accordance with Article 6 (1) (b) GDPR for the fulfillment of the contract), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.) .
If we commission third parties to process data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 GDPR.
If we disclose, transmit or otherwise grant data to other companies in our group of companies, this is done in particular for administrative purposes as a legitimate interest and beyond that on the basis of a contract processing contract.
Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this takes place within the scope of the use of third-party services or disclosure or transmission of data to third parties, this will only take place if it is carried out to fulfill our (pre) contractual obligations, based on your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only if the special requirements of Art. 44 ff. GDPR are met. This means that the processing takes place, for example, on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to the EU (e.g. for the USA through the "Privacy Shield") or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses ").
Section III - Processing Processes
The following illustration gives you an overview of the processing activities we have carried out, which we have broken down into other areas of activity. Bit te, note that the areas of activity are only indicative, and that the processing activities may overlap (for example, the same data can be processed in several process).
For reasons of clarity and comprehensibility, you will find the frequently repeated terms in section IV of this data protection declaration.
Core area of data processing
In this area you will receive information on our core services and tasks, such as answering inquiries and providing our contractual services as well as the associated additional tasks.
Comparative and mediation services
We process the information provided by the interested parties in the context of the comparison request for the purposes of starting, executing and, if necessary, terminating a contract for the mediation of offers from providers of the products or services you have requested.
We use the contact details of the interested parties to specify your inquiry by telephone and to suggest suitable providers based on the specified inquiry.
By submitting the comparison request (by clicking on the "Compare offers" button), the interested parties agree that we may process their name as well as their contact and request data in order to process their request, prepare them for the preparation of an offer and send them to them to send selected providers.
The consent can be revoked informally at any time, e.g. by email to dg @ emlak 24 .com or by letter to ELMAK24 (DG Investment GmbH), Friesenplatz 4, 50672 Cologne , with effect for the future.
We log the entries in the comparison form in order to be able to prove the existence of the contractual relationship and the consent of the interested parties in accordance with the legal accountability obligations (Art. 5 Para. 2 GDPR).
- Processed data: inventory data, communication data, contract data, content data, usage / metadata; As part of the logging, the time of requesting the comparison request, the time of activating the confirmation link and the IP address are saved.
- Special categories of personal data: health data, if this is necessary for the mediation.
- Affected parties: Interested parties, online users and website visitors.
- Purpose of processing: provision of contractual services, customer service, logging.
- Processing basis: Art. 6 para. 1 lit. b (contract for the mediation of comparative inquiries ) and c (legally required logging / archiving) GDPR.
- Necessity / interest in processing: The data is required to justify and fulfill the contractual services as well as to fulfill statutory verification requirements.
- External disclosure and purpose: To offer, for the purpose of making offers to interested parties in the context of the comparison.
- Processing in third countries: No.
- Deletion of the data: The data are stored in accordance with the legal requirements and contractual agreements (§ 35 BDSG in conjunction with Art. 18 GDPR). Initially, the data will only be kept for as long as is necessary for the fulfillment of the contractual purposes . The data is required in particular to process service requests or information about the contract status that are common and occur regularly in the course of business, for the purpose of which the data is stored in the active system for up to six months. In addition, the data is stored within the regular statutory limitation period (§§ 195.199 BGB) within a period of three years from the end of the contractual relationship, insofar as this data could become necessary based on previous business experience and normal business trends , in order to guarantee and Process claims for damages or comparable complaints as well as inquiries and to be able to provide the necessary evidence , especially with regard to the data protection lawfulness of the processing of the data. In this case, the processing of the data is restricted solely to the aforementioned purposes in accordance with § 35 BDSG in conjunction with Art. 18 GDPR. In addition, the data is stored in accordance with the statutory archiving requirements within the meaning of Art. 6 Para. 1 lit. c. GDPR, i.e. for 10 years in accordance with sections 147 (1) AO, 257 (1) no. 1 and 4, (4) HGB (books, records, management reports , accounting documents, trading books, documents relevant for taxation, etc.) and 6 years in accordance with section 257 (1) nos. 2 and 3, paragraph 4 HGB (commercial letters). Even in the case of legally prescribed archiving, processing is restricted to this purpose alone . The necessity of storing the data is implemented in ongoing processes and is checked regularly.
Registration area (customer area)
We offer a closed area for users, which requires verified registration and enables users to manage their inquiries and their data within the framework of the technical functions available.
- Processed data: inventory data, communication data, contract data, content data, usage data, metadata
- Affected parties: prospective customers, existing customers, third parties.
- Purpose of processing: provision of contractual services, customer service, making a closed area available.
- Processing basis: Art. 6 para. 1 lit. a, kind lit 6 Abs. 1, . b. GDPR.
- Necessity / interest in processing: The data are required to justify and fulfill the contractual services.
- External disclosure and purpose: No.
- Processing in third countries: No.
- Deletion of data: We keep the data until the user objects to the use of his data within the customer area; in the case of statutory archiving obligations, deletion takes place after its expiration.
Qualification by telephone
We process the information provided by the interested parties and customers in the context of the comparison request for the purpose of justifying, executing a contract to broker offers from providers of the products or services you have requested. It may be necessary for us to contact you by phone to discuss product and service-specific features with the prospect or customer.
- Processed data: communication / contact details, metadata
- Affected parties: prospective customers , existing customers
- Purpose of processing: provision of contractual services, customer service.
- Processing basis: Art. 6 para. 1 lit. b. GDPR.
- Necessity / interest in processing: The data are required to justify and fulfill the contractual services and fulfillment.
- External disclosure and purpose: Twilio Ireland Limited, 25-28 North Wall Quay Dublin 1, Ireland; Provision and implementation of the contractual service.
- Special protective measures: order processing contract.
- Processing in third countries: No.
- Deletion of the data: The retention of data of the prospective customers corresponds to the information on the deletion of the data in the context of the above-mentioned processing activity “comparison and agency services”; otherwise we delete the contact details if they are no longer required to be stored, which is usually the case 6 months after the last contact; in the case of statutory archiving obligations, deletion takes place after its expiration.
Answering inquiries
We process the information in the inquiries that we receive via our contact form and in other ways, e.g. via email , in order to answer the inquiries. For these purposes, inquiries can be stored in our customer relationship management system (CRM system) or in similar processes that help us to manage inquiries .
- Processed data: inventory data, communication data, contract data, content data, usage data, metadata
- Affected parties: interested parties, online users or website visitors, business partners, third parties.
- Purpose of processing: answering inquiries.
- Processing basis: Art. 6 para. 1 lit. b. GDPR.
- Necessity / interest in processing: Necessary to answer the inquiries.
- External disclosure and purpose: No.
- Processing in third countries: No.
- Deletion of the data : The retention of data of the interested parties corresponds to the information on the deletion of the data in the context of the above processing activity “comparison and mediation services”; otherwise we delete the inquiries if they are no longer required to be stored, which is usually the case 6 months after the last contact; in the case of statutory archiving obligations, deletion takes place after its expiration.
Business analysis and market research
In order to operate our business economically , to be able to recognize market trends, interested parties and user requests, we analyze the data available to us on business transactions, contracts, inquiries, etc.
For this purpose, we combine the personal data of the prospective customers from registrations and comparative inquiries with the usage data of the customers.
- Processed data: inventory data, communication data, contract data, content data, usage data, metadata.
- Processing basis: Art. 6 para. 1 lit. f. GDPR.
- Affected: Customers, interested parties, business partners, visitors and users of the online offer.
- Purpose of processing: business analysis, marketing, advertising, market research.
- Type, scope, functionality of the processing: profile creation, first party cookies.
- Necessity / interest in processing: Increased user-friendliness, optimization of the offer, economic efficiency.
- External disclosure and purpose: The analyzes serve us alone and are not disclosed externally unless they are anonymous analyzes with summarized values.
- Processing in third countries: No.
- Deletion of the data: The retention of data of the interested parties corresponds to the information on the deletion of the data in the context of the above processing activity “comparison and mediation services”; otherwise, the overall business analyzes and general trend determinations are created anonymously if possible.
Data protection information for applicants
This section informs applicants about the processing of their data in the application process
Application process
Applicants can send us their applications by email. However, we kindly ask you to note that emails are not sent encrypted and that applicants themselves have to take care of the encryption. We can therefore accept no responsibility for the transmission path of the application between the sender and receipt on our server.
Instead of applying via e-mail, applicants still have the option of sending us the application by post. As part of the application process, your data will be used by the HR department and other authorized persons, in particular by the executives involved in the application process, within EMLAK24 to check your suitability for the advertised position. In addition, consent to admission to our talent pool can be given for the purpose of filling positions later . As part of our application process, we also use data from public directories and career networks (e.g. Xing, LinkedIn).
- Processed data: inventory data, contact details, content data (content application folder, correspondence, internal comments).
- Special categories of personal data: Yes, if necessary for the application process or submitted by applicants (e.g. health data).
- Processing basis: Art. 6 para. 1 lit. b. DS GMO, § 26 BDSG, Art. 28 para. 3 sentence 1 DSGVO.
- Affected: Applicants
- Purpose of processing: application process, selection of applicants.
- Special protective measures: Limitation of access to application documents to positions that are involved in the application process ; Encrypted transmission option.
- Necessity / interest in processing: Requirement for an applicant selection, the use of our recruiting tool is based on our legitimate interests, as well as the interests of the applicants in the implementation of a fast and effective application process.
- Processing in third countries: no.
- Deletion of the data: In the case of a successful application, the data provided by the applicants can be processed by us for the purposes of the employment relationship; Applicant data will be deleted when an application is withdrawn, which applicants are entitled to do at any time. Subject to a justified revocation of the applicants, the deletion takes place after a period of six months, so that we can answer any follow-up questions to the application and meet our obligations to provide evidence from the General Equal Treatment Act (AGG). You can informally withdraw your consent at any time.
External online presences
In this area you will receive information about our data processing in the context of the operation of external online presences, for example in social media.
ONLINE PRESENCE IN SOCIAL MEDIA
We maintain online presences within social networks and platforms in order to communicate with the customers, interested parties and users active there and to be able to inform them about our services. When calling up the respective networks and platforms, the terms and conditions and the data processing guidelines of the respective operators apply . Unless otherwise stated in our data protection declaration, we process the data of users provided that they communicate with us within the social networks and platforms, e.g. write articles on our online presence or send us messages.
The links / buttons to social networks and platforms (hereinafter referred to as "social media") used within our online offer only establish contact between social networks and users when users click on the links / buttons and the respective networks, or their websites are accessed. This function corresponds to the function of a regular online link. We would like to point out that data from users outside the European Union can be processed. This can result in risks for the user, because it could make it more difficult, for example, to enforce users' rights. With regard to US providers who are certified under the Privacy Shield, we would like to point out that they undertake to comply with the EU data protection standards.
In addition, user data is usually processed for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and the resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements inside and outside the platforms that are supposed to correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, data can be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
The processing of users' personal data takes place on the basis of our legitimate interests in effective information for users and communication with users in accordance with. Art. 6 para. 1 lit. f. GDPR. If the users are asked by the respective providers for their consent to data processing (i.e. declare their consent, for example, by ticking a checkbox or confirming a button), the legal basis for processing is Art. 6 Para. 1 lit. a., Art. 7 GDPR.
For a detailed description of the respective processing and the possibilities of objection (opt-out), we refer to the information linked below by the provider.
Also in the case of requests for information and the assertion of user rights, we would like to point out that these can be most effectively asserted by the providers . Only the providers have access to user data and can take appropriate measures and provide information directly. If you still need help, you can contact us.
Social networks / platforms used by us :
- Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland) - data protection declaration: https://www.facebook.com/about/privacy/, opt-out: https: //www.facebook .com / settings? tab = ads and http: // www.youronlinechoices.com.
- Google / YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) - data protection declaration: https://policies.google.com/privacy, opt-out: https://adssettings.google.com/authenticated.
- Instagram (Facebook Irela nd Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland) - Privacy Policy / Opt-Out: http://instagram.com/about/legal/privacy/.
- Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland) - Data protection declaration: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization.
- Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) - Privacy Policy / Opt-Out: https://about.pinterest.com/de... privacy-policy.
- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) - Privacy Policy https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest- controls / retargeting-opt-out.
- Xing (XING A G, Dammtorstraße 29-32, 20354 Hamburg, Germany) - data protection declaration / opt-out: https://privacy.xing.com/de/datenschutzerklaerung.
- Necessity / interest in processing: expectations of users who are active on the platforms, business interests.
Processing overview:
- Processed data: inventory data, communication data, content data, usage data, metadata.
- Special categories of personal data: Basically no, unless stated by users.
- Processing basis: Art. 6 para. 1 lit f. GDPR.
- Affected: Users of the social media presence (this may include interested parties and business partners).
- Purpose of processing: information and communication.
- Type, scope, mode of operation of the processing: As a rule by the operator of the respective platforms: permanent cookies, tracking, targeting, remarketing, content and behavior-related advertising.
- Necessity / interest in processing: expectations of users who are active on the platforms, business interests.
- External disclosure and purpose: Towards social networks / platforms.
- Processing in third countries: No.
- Deletion of data: The deletion rules of the respective platforms apply.
Web server and security
HOSTING
The hosting services used by us provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services, technical maintenance services.
- Processed data: inventory data, contact data, content data , contract data , usage data , meta / communication data .
- Special categories of personal data: no.
- Processing basis: Art. 6 para. 1 lit. f GDPR.
- Affected: Customers, interested parties, visitors to the online offer.
- Special protective measure n: Order processing contract.
- Processing in third countries: no.
- External disclosure and purpose: name, address, web host.
- Necessity / interest in processing: security, business interests.
- Deletion of the data: The retention of data of the interested parties corresponds to the information on the deletion of the data in the context of the above processing activity “comparison and mediation services”.
SERVER LOGS
The server on which this online offer is located collects so-called log files each time the online offer is accessed, in which user data is stored. The data are used on the one hand for statistical analysis to maintain and optimize server operation and on the other hand for security purposes , for example to identify potential unauthorized access attempts.
- Processed data: usage data and metadata (name of the accessed website, file, date and time of access, amount of data transferred , notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider).
- Special categories of personal data: no.
- Processing basis: Art. 6 para. 1 lit. f GDPR.
- Affected: Customers, interested parties, visitors to the online offer.
- Purpose of processing: optimization of server operation and security monitoring.
- Necessity / interest in processing: security, business interests .
- Processing in third countries: no.
- Deletion of data: after 7 days from collection.
CONTENT DELIVERY NETWORK (CDN)
A content delivery network is a service that enables the content of our online offer, in particular large media files such as graphics or scripts, to be delivered more quickly with the help of regionally distributed and Internet-connected servers.
- Processed data: The data flow between the web server and the user's browser, IP address.
- Special categories of personal data : no.
- Processing basis: Art. 6 para. 1 lit. f GDPR, Art. 28 Para. 3 Clause 1 GDPR.
- Affected parties: Customers, interested parties, business partners, employees and other employees, website visitors.
- Special protective measures: order processing contract.
- Necessity / interest in processing: user-friendliness, business interests.
- External disclosure and purpose: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.
- Processing in third countries: USA.
- Guarantee for processing in third countries: https://www.privacyshield.gov/participant?id=a2zt0000000TTozAAG&status=Active
- Deletion of the data: Only brief temporary storage as part of the delivery.
Embedded content and functions
In this section we inform you about the content, software or functions ("content" for short) of other providers as part of our online offer based on Art. 6 Para. 1 lit. f Embed GDPR (so-called "embedding"). The embedding is done in order to make our online offer more interesting for our users or for legal reasons, for example to be able to present videos or social media posts at all within our online offer. The embedding can also serve to improve the speed or security of the online offer, for example if software elements or fonts are obtained from other sources . In all cases, the processed data includes the usage and metadata of the users and also the IP address that is necessarily sent to the provider for embedding the content; the data subjects include the visitors to our online offer . The categories of data subjects include the users of our online offer, customers and interested parties. Further explanations can be found in the definition of terms , in particular regarding the functions and protective measures, at the end of this data protection declaration. The deletion of the data is determined by the data protection conditions of the providers of the embedded content.
SERVICES AND CONTENT FROM GOOGLE
We use the following services and content from the provider Google: YouTube videos; Google Maps - Maps; Google Fonts; Google - Recaptcha (detection of bots when entering forms).
- Processed data: usage data, metadata.
- Type, scope, functionality of the processing: permanent cookies, third-party cookies, interest-based marketing, tracking.
- Special protective measures: pseudonymization, opt-out.
- Opt-out: http://tools.google.com/dlpage/gaoptout?hl=de , https://adssettings.google.com/authenticated.
- External disclosure: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
- Data protection declaration: https://www.google.com/policies/privacy / .
- Processing in third countries: No.
- Deletion of data: The data will be deleted in accordance with the provisions of Google.
FUNCTIONS AND CONTENT OF FACEBOOK
Functions and content of the Facebook service may be integrated into our online offer. This may include, for example, content such as images, videos or texts and buttons with which users can express their liking for the content, subscribe to the authors of the content or subscribe to our contributions.
- Processed data: usage data, metadata; if users are registered with the service, the above data can be linked to their profiles and the data stored with the service (in particular inventory data).
- Type, scope, functionality of processing: social plugins, permanent cookies, third party cookies, interest-based marketing, tracking, remarketing.
- Opt-Out: https://www.facebook.com/settings?tab=ads , http: //www.youronlinec hoices.com/uk/your-ad-choices/ (EU), http: //www.aboutads .info / choices (US).
- External disclosure: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.
- Data protection declaration: https://www.facebook.com/policy.php .
- Processing in third countries: No.
- Deletion of the data: The data will be deleted in accordance with the provisions of Facebook.
FUNCTIONS AND CONTENT OF INSTAGRAM
Functions and content of the Instagram service may be integrated into our online offer. This may include, for example, content such as images, videos or texts and buttons with which users can express their liking for the content, subscribe to the authors of the content or subscribe to our contributions.
- Processed data: usage data, metadata; if users are registered with the service, the above data can be linked to their profiles and to the data stored with the service (in particular inventory data).
- Type, scope, functioning of the processing: social plugins, permanent cookies, third party cookies, interest-based marketing, tracking, remarketing.
- External disclosure: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2 Ireland.
- Data protection declaration : ht tp: //instagram.com/about/legal/privacy/ .
- Processing in third countries: No.
- Deletion of the data: The data will be deleted in accordance with the provisions of Instagram.
FUNCTIONS AND CONTENT OF PINTEREST
Functions and content of the Pinterest service may be integrated into our online offer. This can include, for example, content such as images, videos or text and buttons with which users can express their liking for the content, subscribe to the authors of the content or subscribe to our contributions.
- Processed data: Processed data: usage data, metadata; if users are registered with the service, the above data can be linked to their profiles and the data stored with the service (in particular inventory data).
- Type, scope, functionality of processing: social plugins, permanent cookies, third party cookies, interest-based marketing, tracking, remarketing.
- External disclosure: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
- Data protection declaration: https://about.pinterest.com/de/privacy-policy .
- Processing in third countries: No.
- Deletion of the data: The data will be deleted in accordance with the provisions of Pinterest.
FUNCTIONS AND CONTENT OF PRICEHUBBLE
The functions and content of PriceHubble are integrated into our online offer . This can include, for example, content such as images, videos, graphics or text and buttons that users can use to request information about the value of their property.
- Processed data: user data (object data), contact details.
- Type, scope, mode of operation of processing: third-party cookies, pseudonymization.
- External disclosure: PriceHubble Deutschland GmbH, Poststrasse 33, 20354 Hamburg ..
- Data protection declaration : https: // pricehubble.com/de/privacy/data-policy/ .
- Processing in third countries: No.
- Deletion of the data: The data will be deleted in accordance with the provisions of PriceHubble.
FUNCTIONS AND CONTENT OF TWITTER
Functions and content of the Twitter service can be integrated into our online offer . This may include, for example, content such as images, videos or texts and buttons with which users can express their liking for the content, subscribe to the content authors or our contributions .
- Processed data: usage data, metadata; if users are registered with the service, the above data can be linked to their profiles and to the data stored with the service (in particular inventory data).
- Type, scope, mode of operation of processing: social plugins, permanent cookies, third-party cookies, interest-based marketing, tracking, remarketing.
- Opt-out: https://twitter.com/personalization .
- External disclosure : Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland.
- Data protection declaration: https://twitter.com/de/privacy .
- Processing in third countries: No.
- Deletion of the data: The data will be deleted in accordance with the provisions of Twitter.
FUNCTIONS AND CONTENT OF XING
Functions and content of the Xing service can be integrated into our online offering . This may include, for example, content such as images, videos or texts and buttons with which users can express their liking for the content, subscribe to the content authors or our contributions.
- Processed data: usage data, metadata; if users are registered with the service, the above data can be linked to their profiles and to the data stored with the service (in particular inventory data).
- Type, scope, function of processing: social plugins, permanent cookies, third-party cookies, interest-based marketing, tracking, remarketing.
- External disclosure: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.
- Data protection declaration: https://www.xing.com/app/share?op=data_protection
- Processing in third countries: no.
- Deletion of the data: The data will be deleted in accordance with the provisions of Xing.
FUNCTIONS AND CONTENT OF LINKEDIN
I ithin our online presence features and content to the service LinkedIn are involved. This can include, for example, content such as images, videos or text and buttons with which users can express their liking for the content, subscribe to the authors of the content or subscribe to our contributions.
- Processed data: usage data, metadata; if users are registered with the service, the above data can be linked to their profiles and the data stored with the service (in particular inventory data).
- Type, scope, functionality of processing: social plugins, permanent cookies, third party cookies, interest-based marketing, tracking, remarketing.
- Opt-out: https://www.linkedin.com/psett... s / retargeting-opt-out
- External disclosure: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
- Data protection declaration: https://www.linkedin.com/legal/privacy-policy
- Ve rarbeitung in third countries: no.
- Deletion of the data: The data will be deleted in accordance with the provisions of Instagram LinkedIn.
marketing
In this section you will find information on the data processing we carry out for the purpose of optimizing our marketing and market research services.
INFORMATION DELIVERY BY PERSONALIZED NEWSLETTER
We send newsletters, e-mails and other electronic notifications with advertising information (hereinafter "newsletter") only with the consent of the recipient or a legal permission. Subscriber data is logged as we are obliged to provide proof of registration. Insofar as the content of the newsletter is not expressly described in the registration for the newsletter, the newsletter contains information regarding our company and our services and offers, in particular for service areas that the recipient has declared to be in his / her interests (e.g. if a user as part of a consent process an interest in kitchens). However, notifications that are sent as part of contractual or business relationships do not belong to advertising information . This includes, for example, the sending of service emails with requested comparative offers or comparable services, technical or organizational information in the context of our service provision, information on technical and legal changes, queries about orders, etc. If we have received your consent to personalized information, we will be yours Evaluate user behavior on our website as well as within the newsletter sent by us and assign it to your user profile. We also store information about the devices used, opening, clicking and reading behavior in e-mails, as well as subject areas that have been visited on the website. For technical reasons, this information is stored personally per user, but is not used to monitor individual users, but rather to adapt content and offers to users, for example. Information that we should collect in addition to the e-mail address (e.g. name) is used to address users personally or to adapt the content of the newsletter to users.
- Content of the newsletter: As stated in the registration form, otherwise information about our services and our company.
- Processed data: inventory data (email address), usage data (time of registration, time of confirmation, double opt-in, IP address , opening of the email, time and place, time and click on a link in the newsletter).
- Special categories of personal data: no
- Processing basis: Art. 6 para. 1 lit. a, Art. 7 GDPR and § 7 Para. 2 No. 3 UWG, Para. 3 (shipping & performance measurement), Art. 6 Para. 1 lit. c in conjunction with Art. 7 Para. 1 GDPR (logging, success measurement if no part of the consent)
- Affected: email recipients
- Purpose of processing: newsletter dispatch, optimization, proof of consent.
- Type, scope, function of processing: web beacon.
- Necessity / interest in processing: Only the e-mail is required for sending, the other information is voluntary and serves to personalize and optimize the content based on the interests of the users; the obligation to prove consent is the reason for logging; Success measurement is carried out for users whose consent includes measuring success, on the basis of consent and otherwise on the basis of legitimate interests in optimizing content for users and on the basis of business interests
- Opt-out: There is a cancellation link in every newsletter.
- Processing in third countries: No.
- Deletion of the data: We can save the e-mail address you have given for up to three years based on our legitimate interests before we delete it for the purposes of sending the newsletter in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the previous consent is confirmed. Users can revoke their consent to the storage of the data, the e-mail address and their use for sending newsletters at any time. The revocation can be made via a link in the newsletter, with the unsubscribe function on our website or by e-mail to dg @ emlak 24 .com.
COMMUNICATION VIA ME SSENGER
We use messenger services for communication purposes and therefore ask you to observe the following information on the functionality of the messenger, encryption, use of the metadata for communication and your options to object. You can also contact us in alternative ways, e.g. via telephone or email. Please use the contact options provided to you or use the specified contact options within our online offer. In the case of encryption, end-to-end of content (ie the content of your message and attachments), we would like to point out that the communication content (ie the content of the message and attached images) are encrypted end-to-end. This means that the content of the messages is not visible, not even through the messenger providers themselves. You should always use a current version of the messenger with activated encryption, so that the encryption of the message content is ensured. However, we would also like to point out to our communication partners that the providers of the messenger may not see the content, but can find out that and when communication partners communicate with us, as well as technical information on the device used by the communication partner and, depending on the settings of their device, also Location information (so-called metadata) processed.
Notes on legal bases - If we ask communication partners for permission before communicating with them via Messenger, the legal basis for our processing of their data is their consent. Incidentally, if we do not ask for consent and, for example, contact you on our own initiative, we use Messenger in relation to our contractual partners and in the course of contract initiation as a contractual measure and in the case of other interested parties and communication partners based on our legitimate interests in fast and efficient communication and meeting the needs of our communication partner in communication via messengers. We would also like to point out that we will not transmit the contact details provided to us to Messenger for the first time without your consent.
Revocation, objection and deletion - you can revoke your consent at any time or object to communication with us via Messenger at any time. In the case of communication via Messenger, we delete the messages in accordance with our general deletion guidelines (e.g. as described above after the end of contractual relationships, archiving requirements , etc.) and otherwise as soon as we can assume that we have answered any information from the communication partners if there is no reference to one previous conversation is expected and the solution does not conflict with any statutory retention requirements.
- Processed data: inventory data, contact data, usage data, contract data, content data
- Processing basis: Art. 6 para. 1 lit. a, Art. 7 GDPR with consent, Art. 6 Para. 1 lit. b GDPR when contacting within the scope of contract processing, Art. 6 Para. 1 lit. f GDPR in connection with legal requirements for advertising communications.
- Affected: interested parties, business partners.
- Purpose of processing: advertising communication.
- Type, scope, mode of operation of the processing: Contact is only made with the consent of the contact partner or within the scope of the legal permits.
- Necessity / interest in processing: information and business interests.
- Open interpretation externally and purpose: Facebook Messenger: Facebook Messenger with end-to-end encryption; Service provider: https://www.facebook.com ., Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2 , Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com .; Privacy policy: https: //www.facebook.c om / about / privacy .; Privacy Shield (guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active .; Opposition option (opt-out): https://www.facebook.com/settings?tab=ads. .. Note: The end-to-end encryption of the Facebook messenger requires activation.