Privacy Policy pursuant to Art. 13 GDPR

Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

DIWG Deutsche Immobilien Wirtschafts Gesellschaft mbH
Berliner Allee 51 – 53
40212 Düsseldorf
Germany
Phone: +49 (211) 56 94 09 – 0
Email: info@diwg.de

Contact Details of the Data Protection Officer

You can reach the controller’s data protection officer at the following contact details:

CompliPro GmbH
René Floitgraf
Frankenstrasse 34
52223 Stolberg
Germany
Phone: +49 2402 9245980
Email: info@complipro.de

General Information on Data Processing

Legal Basis for the Processing of Personal Data

In accordance with Art. 13 GDPR, we inform you of the legal bases for our data processing activities. Where the legal basis is not specifically stated in this privacy notice, the following applies:

The legal basis for obtaining consent is Art. 6(1)(a) in conjunction with Art. 7 GDPR. The legal basis for processing to perform our services and carry out contractual measures, as well as to respond to inquiries, is Art. 6(1)(b) GDPR. The legal basis for processing to fulfil our legal obligations is Art. 6(1)(c) GDPR. Where processing of your data is necessary to safeguard a legitimate interest of our company or a third party, and where your interests, fundamental rights and freedoms do not override that interest, Art. 6(1)(f) GDPR serves as the legal basis for the processing. Where processing of personal data is necessary to protect the vital interests of the data subject or of another natural person, Art. 6(1)(d) GDPR serves as the legal basis.

Data Deletion and Storage Period

We adhere to the principles of data minimisation pursuant to Art. 5(1)(c) GDPR and storage limitation pursuant to Art. 5(1)(e) GDPR. We store your personal data only for as long as is necessary to achieve the purposes stated here, or for as long as required by statutory retention periods. Once the respective purpose no longer applies, or once these retention periods have expired, the corresponding data will be deleted as soon as possible.

External Links

This website may contain links to third-party websites or to other websites for which we are responsible. If you follow a link to a website outside our responsibility, please note that such websites have their own privacy policies. We assume no responsibility or liability for these third-party websites and their privacy notices. Before using such websites, please check whether you agree with the privacy policies provided there.

You can recognise external links either because they are displayed in a different colour from the surrounding text or are underlined. Your cursor will indicate an external link when you hover over it. Only when you click on an external link will your personal data be transmitted to the destination of the link. In doing so, the operator of the other website receives, in particular, your IP address, the time at which you clicked the link, the page on which you clicked the link, as well as further information that you can find in the respective provider’s privacy notice.

Please also note that individual links may result in data being transferred outside the European Economic Area. This could allow foreign authorities to access your data. You may not have any legal remedies against such access. If you do not want your personal data to be transmitted to the link’s destination, or to be exposed to unwanted access by foreign authorities, please do not click on any links.

Rights of the Data Subject

As a data subject within the meaning of the GDPR, you have the option of exercising various rights. The rights arising from the GDPR are the right to information (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to lodge a complaint with a supervisory authority, and the right to data portability (Article 20).

Right of Withdrawal

Some data processing operations can only take place with your express consent. You may withdraw your given consent at any time. The lawfulness of the data processing carried out until the withdrawal remains unaffected by this.

Right to Object

Where processing is based on Art. 6(1)(e) or (f) GDPR, you have the right, as a data subject, to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you. This right also applies to profiling based on these provisions within the meaning of Art. 4(4) GDPR. If we are unable to demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or that the processing serves the establishment, exercise or defence of legal claims, we will discontinue the processing of your data following your objection.

Where personal data is processed for the purpose of direct marketing, you also have the right to object at any time. The same applies to profiling insofar as it is related to such direct marketing. In this case too, we will no longer process your personal data once you have objected.

Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

Right to Data Portability

Where your data is processed by automated means on the basis of consent or in performance of a contract, you have the right to receive that data in a structured, commonly used and machine-readable format. You also have the right to request that this data be transferred and provided to another controller, insofar as this is technically feasible.

Right of Access, Rectification and Erasure

You have the right to receive information about your processed personal data, including the purpose of the processing, the categories of data, the recipients, and the duration of storage. If you have any questions on this or any other topic relating to personal data, you are welcome to contact us using the contact details provided in the imprint.

Right to Restriction of Processing

You may request the restriction of the processing of your personal data at any time. To do so, one of the following conditions must be met:

You dispute the accuracy of the personal data. For the duration of the verification of accuracy, you have the right to request restriction of processing.
If the processing is unlawful, you may, instead of requesting erasure, request the restriction of the use of the data.
If we no longer need your personal data for the purposes of processing, but you require the data to establish, exercise or defend legal claims, you may request restriction of processing instead of erasure.
If you have objected to the processing pursuant to Art. 21(1) GDPR, a balancing of your interests against ours will be carried out. Pending the outcome of this assessment, you have the right to request restriction of processing.

If processing has been restricted, such personal data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.

Provision of the Website (Web Host)

Our website is hosted by:

ALL-INKL.COM – Neue Medien Münnich
Hauptstraße 68, 02742 Friedersdorf
Germany

When you access our website, we automatically collect and store information in what are known as server log files. This information is automatically transmitted by your browser to our server, or to the server of our hosting company.

This includes:

IP address of the visitor’s device
Device used
Hostname of the accessing computer
Visitor’s operating system
Browser type and version
Name of the file accessed
Time of the server request
Amount of data transferred
Whether the data retrieval was successful

This data is not merged with data from other sources.

Instead of operating this website on our own server, we may also have it operated on the server of an external service provider (hosting company), which we have named above where applicable. The personal data collected on this website is then stored on the hosting company’s servers. In addition to the data mentioned above, the web host may also store, on our behalf, contact enquiries, contact details, names, website access data, meta and communication data, contractual data, and other data generated via a website.

The legal basis for the processing of this data is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free presentation and optimisation of this website. If the website is accessed in order to enter into contract negotiations with us or to conclude a contract, Art. 6(1)(b) GDPR serves as a further legal basis. Where we have engaged a hosting company, a data processing agreement is in place with that service provider.

Use of Local Storage Items, Session Storage Items and Cookies

Our website uses local storage items, session storage items and/or cookies. Local storage is a mechanism that allows data to be stored within your browser on your device. This data usually contains user preferences, such as the “day” or “night mode” of a website, and remains until you delete the data manually. Session storage is very similar to local storage, except that the storage period only lasts for the duration of the current session, i.e. until the current tab is closed. After that, session storage items are deleted from your device. Cookies are pieces of information that a web server (a server that provides web content) stores on your device in order to identify that device. They are either stored temporarily for the duration of a session (session cookies) and deleted after your visit to a website ends, or stored permanently (permanent cookies) on your device until you delete them yourself or they are automatically deleted by your web browser.

These objects may also be stored on your device by third-party companies when you visit our site (third-party requests). This enables us, as the operator, and you, as a visitor to this website, to make use of certain services provided by third parties that are installed on this website. Examples of this include the processing of payment services or the display of videos.

These mechanisms have a wide range of uses. They can improve the functionality of a website, control shopping cart functions, increase the security and convenience of website use, and enable analysis of visitor traffic and behaviour. Depending on the individual functions, these are classified differently under data protection law. Where they are necessary for the operation of the website and for providing certain functions (e.g. shopping cart function), or serve to optimise the website (e.g. cookies used to measure visitor behaviour), they are used on the basis of Art. 6(1)(f) GDPR. As the website operator, we have a legitimate interest in storing local storage items, session storage items and cookies for the technically error-free and optimised provision of our services. In all other cases, local storage items, session storage items and cookies are only stored with your express consent (Art. 6(1)(a) GDPR).

Where local storage items, session storage or cookies are used by third-party companies or for analytical purposes, we will inform you of this separately within this privacy notice. Your required consent is requested and can be withdrawn at any time.

Use of External Services

Our website uses external services. External services are services provided by third-party providers that are used on our website. This may occur for various reasons, for example to embed videos or for website security purposes. When using these services, personal data is also transferred to the respective providers of these external services. Where we do not have a legitimate interest in using these services, we obtain your consent, which can be withdrawn at any time, before using them, as a visitor to our website (Art. 6(1)(a) GDPR).

Consent Management

In order to comply with data protection requirements, we use a consent management tool on our website. We use this tool to obtain the necessary consents for setting cookies or using external services. The consents given are stored.

This processing is necessary for compliance with a legal obligation to which the controller (website operator) is subject. The legal basis for this processing is therefore Art. 6(1)(c) GDPR.

Borlabs Cookie

We use the Borlabs Cookie service on our website. The provider of this service is Borlabs – Benjamin A. Bornstein, Rübenkamp 32, 22305 Hamburg, Germany.

As this service is hosted locally on the web server, no data is transferred to third parties.

This service sets the following cookies on our website:

Name	Storage Period	Type	Purpose
borlabs-cookie	60 days	1st-party cookie	This cookie stores the visitor’s settings selected in the Borlabs Cookie consent box.

Polylang

We use the Polylang service on our website. The provider of this service is WP Syntex, 28, rue Jean Sébastien Bach, 38090 Villefontaine, France.

As this service is hosted locally on the web server, no data is transferred to third parties.

We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).

This application is required to ensure the full functionality of the website. It is a tool used for the linguistic optimisation of the website.

This service sets the following cookies on our website:

Name	Storage Period	Type	Purpose
pll_language	365 days	1st-party cookie	This cookie stores the selected language.

Display Optimisation

We use tools designed to optimise the presentation of our website. Among other things, these tools help to display the website in other languages or in a more accessible way.

Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data will not be processed in the manner described above. If you withdraw your consent (e.g. via the consent banner or other means provided on this website), we will discontinue this data processing. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

Forms and Surveys

We use tools on our website that enable us to create surveys and forms and integrate them into our website. These tools are used to conduct surveys on various topics on our website. Through the forms, we can create and integrate enquiries and information on any topic into the website. These forms and surveys can be filled in or answered by you as a website visitor. In the course of visiting the website and completing or answering the surveys or forms, personal data about you as a website visitor is processed. This includes, in particular, your IP address, as well as any further data you enter into the forms or as part of the surveys as a website visitor. This personal data is processed by the website operator and by the provider of the survey or form tool (our data processor) and stored on their servers.

WPForms

We use the WPForms service on our website. The provider of this service is WPForms, LLC, 2701 Okeechobee Blvd, Ste 400, West Palm Beach, 33409 Florida (FL), USA.

As this service is hosted locally on the web server, no data is transferred to third parties.

This service sets the following cookies on our website:

Name	Storage Period	Type	Purpose
_wpfuuid	400 days	1st-party cookie	This cookie is used to store a unique user ID.

Mapping Service

We use a mapping service on this website. In order for the map to be used and displayed on the website, the map must be loaded from the provider’s server. In doing so, your IP address is transmitted to the provider’s server. Depending on the provider, cookies and other technologies, including fonts, may also be loaded. Further details can be found in the provider’s privacy policy.

Google Maps

We use the Google Maps service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Use of this service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider’s privacy information at the following URL: https://business.safety.google/privacy.

Web Fonts

This website uses what are known as web fonts for the uniform display of typefaces. These are provided by an external provider and loaded by the browser when the website is accessed. In doing so, the web font provider becomes aware that our website was accessed from your IP address, as your browser establishes a direct connection to the web font provider.

Google Fonts

We use the Google Fonts service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Further information can be found in the provider’s privacy information at the following URL: https://business.safety.google/privacy.

Contact by Telephone or Email

In accordance with statutory requirements, we have provided a telephone number and an email address on our website. Data transmitted via these channels is automatically stored by us in order to process the relevant enquiry or to contact the person making the enquiry. This data is not passed on to third parties by us without your consent.

Where contact is made by telephone or via our email address for pre-contractual or contractual purposes, the processing of personal data is based on the legal basis of Art. 6(1)(b) GDPR. For all other contact made by you, the processing of personal data by us is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Handling of Applicant Data

There is the option of sending us an application (e.g. by post, an online application form, or by email). The personal data received in this way is stored and processed by us for the purposes of the application process.

The basis for this processing is Art. 6(1)(b) GDPR as well as Art. 6(1)(a) GDPR, provided that consent has been given. You may withdraw your consent at any time. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

Where relevant to the applicant selection process, it is possible that we may also collect personal data about you from third parties. This includes data that is generally accessible on the internet or publicly available on social media (e.g. LinkedIn). This may include data about previous employment relationships or professional suitability. The legal basis for this is Art. 6(1)(f) GDPR (appropriate applicant selection). We will inform you separately and in good time about the collection of such data, including information on its origin, in accordance with Art. 14 GDPR.

Where an application results in an employment relationship, the data collected will be stored for the purpose of carrying out the employment relationship pursuant to Art. 6(1)(b) GDPR. If no employment relationship is entered into, the data will be stored on the basis of Art. 6(1)(f) GDPR for the duration of any statutory claims, in particular due to potential claims of discrimination during the application process. This is necessary for defence against any potential claims or allegations.

If no employment relationship is entered into, the applicant may be included in our applicant pool. In this case, all details from the application will be stored in order to be able to contact the relevant person about suitable job vacancies. The basis for this is Art. 6(1)(a) GDPR. You may withdraw your consent at any time. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

Deletion takes place automatically no later than two years after consent was given. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

Your applicant data is reviewed internally by the HR department. Suitable applications are forwarded to the relevant department head and, where applicable, to management. Data is not passed on to third parties.