The legal principles of data protection can be found in the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG).
Link to Legal Notice: Legal Notice
Estate Agent Services
We process the data of our customers, clients and interested parties (uniformly referred to as “customers”) in accordance with Art. 6 para. 1 lit. b. of the DSGVO in order to provide them with our contractual or pre-contractual services. The data processed, the type, scope and purpose and the necessity of their processing are determined by the underlying order. This basically includes the customer’s data (name, address, etc.), as well as the contact data (e-mail address, telephone, etc.), the contract data (content of the order, fees, terms, information on the brokered companies / insurers / services) and payment data (commissions, payment history, etc.). We can also process information on the characteristics and circumstances of persons or items belonging to them if this is part of our order. This can be, for example, information on personal circumstances, mobile or immovable property.
As part of our assignment, it may also be necessary for us to process special categories of data in accordance with Art. 9 Para. 1 DSGVO, in particular information on the health of a person. In accordance with Art. 6 Para. 1 lit. a., Art. 7, Art. 9 Para. 2 lit. a DSGVO, we obtain the express consent of the customer, if necessary.
Insofar as this is necessary for the fulfilment of the contract or required by law, we disclose or transmit customer data within the scope of cover requests, conclusion and processing of contracts to providers of the brokered services/properties, insurers, reinsurers, broker pools, technical service providers, other service providers, such as cooperating associations, as well as financial service providers, credit institutions and investment companies, social insurance institutions, tax authorities, tax consultants, legal advisors, auditors, insurance ombudsmen and the Federal Financial Supervisory Authority (BaFin). We can also commission sub-contractors such as sub-brokers. We obtain the consent of customers if this is required for disclosure/transmission (which may be the case, for example, in the case of special categories of data pursuant to Art. 9 DSGVO).
The data will be deleted after expiry of statutory warranty and comparable obligations, whereby the necessity of data retention is reviewed every three years; otherwise the statutory retention obligations apply.
In the case of statutory archiving obligations, deletion shall take place after their expiration. According to German law in the insurance and financial sector, consulting protocols for 5 years, broker contract notes for 7 years and broker contracts for 5 years as well as generally 6 years for documents relevant under commercial law and 10 years for documents relevant under tax law are subject to retention.
Access data / server log files
The provider (or his web space provider) collects data about each access to the offer (so-called server log files). The access data includes:
Name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.
The provider uses the log data only for statistical evaluations for the purpose of operation, security and optimisation of the offer. However, the provider reserves the right to subsequently check the log data if there are concrete indications of justified suspicion of illegal use.
Handling of personal data
Personal data are informations which help to determine a person, i.e. information which can be traced back to a person. This includes the name, email address or telephone number. But also data about preferences, hobbies, memberships or which websites were viewed by someone count as personal data.
Personal data is only collected, used and passed on by the provider if this is permitted by law or if the user consents to the collection of such data.
Hosting and Email
The hosting services used by us are intended to supply the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services which we use for the purpose of operating this online service.
Here we or our hosting provider process user data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors to this online service on the basis of our legitimate interests in the efficient and secure provision of this online service pursuant to Art. 6 Para. 1 lit. f DSGVO in conjunction with Art. 28 DSGVO (conclusion of an order processing contract).
When contacting the offerer (for example via contact form or e-mail), the user’s details are stored for the purpose of processing the enquiry and in the event that follow-up questions arise.
Comments and Posts
When users leave comments on the blog or other posts, their IP addresses are stored. This is done for the security of the provider if someone writes illegal content in comments and contributions (insults, forbidden political propaganda, etc.). In this case, the provider himself can be prosecuted for the comment or contribution and is therefore interested in the identity of the author.
Follow-up comments can be subscribed by users. Users will receive a confirmation email to verify that they are the owner of the email address entered. Users can unsubscribe at any time. The confirmation email will contain information about this.
With the newsletter we inform you about us and our offers.
If you would like to receive the newsletter, we need a valid email address from you and also information that allows us to verify that you are the owner of the email address provided or that the owner agrees to receive the newsletter. Further data will not be collected. This data will only be used to send the newsletter and will not be passed on to third parties.
With the registration to the newsletter we store your IP address and the date of the registration. This storage serves only as proof in the event that a third party misuses an email address and registers for receiving the newsletter without the knowledge of the authorised person.
You can at any time withdraw your approval to store the data, the email address and its use to send the newsletter. The withdrawal can be made via a link in the newsletters themselves, in your profile area or by sending a message to the contact options listed above.
Integration of third-party services and content
It may happen that contents of third parties, such as videos from YouTube, map material from Google Maps, RSS feeds or graphics from other websites are integrated within this online service. This always presupposes that the providers of this content (hereinafter referred to as “third-party providers”) use the IP address of the user. Without the IP address, they would not be able to send the content to the browser of the respective user. The IP address is therefore required for the presentation of this content. We make every effort to use only those contents whose respective providers only use the IP address to deliver the contents. However, we have no influence on whether the third party providers store the IP address for statistical purposes, for example. As far as this is known to us, we inform the users about it.
Within this service the images of the stock image provider Getty Images can be integrated. The pictures are recognizable by a frame with the reference “Getty Images”. The presentation of these images requires Getty Images to recognize the IP address of the user so that the images can be delivered to the user’s browser. The IP address is therefore required to view this content. According to current knowledge, the IP address is only used for this purpose. However, the provider has no influence on this if Getty Images stores the IP address for statistical purposes, for example. As far as this is known to the provider, the users will be informed or the images will be removed.
You can manage many online ad cookies from companies via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/uk/your-ad-choices/ .
The data you enter during registration will be used for the purpose of using the offer. Users can be informed by e-mail about information relevant to the offer or registration, such as changes in the scope of the offer or technical circumstances. The collected data can be seen in the input mask during registration.
This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on the user’s computer, to help the website analyze how users use the site. The information generated by the cookie about users’ use of this website is generally transmitted to and stored by Google on servers in the United States.
However, if IP anonymisation is activated on this website, the IP address of Google users within member states of the European Union or in other signatory states to the Agreement on the European Economic Area will be shortened beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information for the purpose of evaluating the use of the website by users, compiling reports on website activity and providing other services relating to website activity and internet usage for website operators.
As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent Google Analytics from collecting this data within this website in the future. An opt-out cookie will be stored on your device. If you delete your cookies, you must click this link again.
Using Facebook Social Plugins
This offer uses social plugins (“Plugins”) of the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins can be recognized by one of the Facebook logos (white “f” on a blue tile or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and appearance of the Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
When a user accesses a website of this offer that contains such a plugin, his browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the website by it. The provider therefore has no influence on the amount of data that Facebook collects with the help of this plugin and therefore informs the user according to his level of knowledge (http://www.facebook.com/help/?faq=17512):
By integrating the plugins, Facebook receives the information that a user has called up the corresponding page of the offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. When users interact with the plugins, for example by clicking the Like button or commenting, the corresponding information is transferred directly from your browser to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to find out his IP address and save it. According to Facebook, only an anonymous IP address is stored in Germany.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as the relevant rights and setting options to protect the privacy of users can be found in Facebook’s data protection information: https://www.facebook.com/about/privacy/.
If a user is a Facebook member and does not want Facebook to collect data about him via this offer and link it with his Facebook stored member data, he must log out of Facebook before visiting the website.
+1 Button of Google+
This service uses the “+1″” button on the Google Plus social network operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). The button can be recognized by the sign “+1″ on a white or colored background.
When a user accesses a website of this offer that contains such a button, the browser establishes a direct connection with Google’s servers. The content of the “+1″” button is transmitted by Google directly to its browser and integrated into the website by it. The provider therefore has no influence on the extent of the data that Google collects with the button. According to Google, no personal data is collected without a click on the button. Only for logged in members, such data, including the IP address, are collected and processed.
The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options to protect your privacy can be found in Google’s data protection information on the “+1″” button: http://www.google.com/intl/de/+/policy/+1button.html and the FAQ: http://www.google.com/intl/de/+1/button/.
This offer uses the buttons of the Twitter service. These buttons are offered by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. They can be identified by terms such as “Twitter” or “episode” combined with a stylized blue bird. With the help of the buttons it is possible to share a contribution or page of this offer on Twitter or to follow the provider on Twitter.
If a user accesses a website of this Internet presence that contains such a button, his browser establishes a direct connection with the servers of Twitter. The content of the Twitter button is transmitted by Twitter directly to the user’s browser. The provider therefore has no influence on the amount of data that Twitter collects with the help of this plugin and informs the user according to his level of knowledge. According to this, only the IP address of the user is transmitted along with the URL of the respective website when the button is purchased, but it is not used for purposes other than the display of the button.
This offer uses the buttons of the service Tumbler. These buttons are offered by Tumblr, Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA, email@example.com. They can be identified by the term “Tumblr”. With the help of the buttons it is possible to divide a contribution or side of this offer with Tumblr or to follow the offerer with Tumblr.
When a user accesses a web page of this website that contains such a button, his browser establishes a direct connection with Tumblr’s servers. The content of the Tumblr button is transmitted by Tumblr directly to the user’s browser. The provider therefore has no influence on the amount of data Tumblr collects with the help of this plugin and informs the user according to his level of knowledge. According to this, only the IP address of the user is transmitted along with the URL of the respective website when the button is purchased, but is not used for purposes other than the display of the button.
Further information on this can be found in Tumblr’s data protection declaration at http://www.tumblr.com/policy/de/privacy.
Flattr” buttons of the micropayment service Flattr, which is operated by the company Flattr Network Ltd. based in 2nd Floor, White bear yard 114A, Clerkenwell Road, London, Middlesex, England, EC1R 5DF, Great Britain, are integrated into the pages of this offer. If you access pages of this website that contain these buttons, your browser will establish a direct connection to Flattr servers. If you have created an account with Flattr and you are logged in at the same time, Flattr will receive the information that you have visited the respective page of this offer. If you have a Flattr account, are logged in and interact with the button, information about it is transmitted to Flattr and stored there for billing purposes in accordance with the guidelines applicable there. Even if you are not logged in, usage data may still be collected and stored. To find out exactly how your data is processed when you click the Flattr button, please visit https://flattr.com/privacy.
This offer uses Google AdSense, a service for the integration of advertisements of Google Inc. (“Google”). Google AdSense uses “cookies”, which are text files placed on the user’s computer, to help the website analyze how users use the site. Google AdSense also uses so-called web beacons (invisible graphics). Through these web beacons, information such as visitor traffic on the pages of this offer can be evaluated.
The information generated by cookies and web beacons about the use of this website (including the user’s IP address) and the delivery of advertising formats is transmitted to a Google server in the USA and stored there. This information can be passed on by Google to Google’s contractual partners. However, Google will not combine your IP address with other data stored by you.
Affected persons rights
You have the right:
1. in accordance with article 15 DSGVO to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of complaint, the origin of your data, unless it has been collected from us.
and on the existence of automated decision making, including profiling and, where appropriate, meaningful information on its details;
2. in accordance with article 16 DSGVO, immediately request the correction of incorrect or incomplete personal data stored by us;
3. to demand the deletion of your personal data stored by us in accordance with article 17 DSGVO, insofar as the processing is not necessary for the exercise of the right to free access to your personal data.
expression of opinion and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
4. to demand the restriction of the processing of your personal data in accordance with article 18 DSGVO if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with article 21 DSGVO;
5. in accordance with article 20 DSGVO, to receive your personal data which you have provided to us in a structured, common and machine-readable format or to request the transfer to another responsible person;
6. in accordance with article 7 para. 3 DSGVO, to revoke your consent once given to us at any time. The consequence of this is that we may no longer continue the data processing based on this consent for the future, and
7. to complain to a supervisory authority in accordance with article 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company.
Withdrawal, changes, corrections and updates
The user has the right, upon request and free of charge, to obtain information about the personal data stored about him. In addition, the user has the right to correction of incorrect data, blocking and deletion of his personal data, unless there is no legal obligation to retain.