Last Change: 2021/11/15
When operating the www.viertel-four.de website, the CA Immo Deutschland GmbH, Friedrich Ebert-Anlage- 35-37, 60327 Frankfurt am Main, (hereinafter shortly “We”) shall act as controller in terms of the GDPR.
You shall not be obliged, in principle, to make your personal data available to us. Where a statutory or contractual obligation to provide your data exists or this is necessary to conclude a contract with us, this has been explicitly stated below. In this case, We shall also inform you about the potential consequences of the non-provisioning of your data.
We shall not use your data for any automated decision-making including profiling in terms of point (f) of Art. 13(2) and point (g) of Art. 14(2) GDPR.
Detailed information on the individual data processing operations can be found hereinafter.
1. Website Provisioning (Log Files & Hosting)
1.1. Data Processing Scope
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer, with the following data being collected and retained in the log files of our system:
- the user’s IP address;
- http method and http version;
- access status / status code of the server responder;
- browser version;
- referrer URL (website from which the user’s system accesses our website);
- visitor’s user name (if logged in via system login; no logging of the user name if the user is logged into a web application having an own user management);
- request date and time and number of sent bytes;
- server responses;
- error codes.
1.2. Data Processing Purpose
The temporary storage of the IP address by the system is necessary to allow for the website delivery to the user’s computer. To this end, the user’s IP address must remain stored for the duration of the session.
It shall be stored in log files to ensure the functionality of the website. Moreover, the data shall serve us to optimise the website and to ensure the security of our IT systems. The data shall not be evaluated for marketing purposes in this context.
1.3. Legal Basis
The legal basis for the temporary retention of the data and log files shall be our legitimate interest under point (f) of Art. 6(1) GDPR. Our legitimate interest in the data processing shall be the achievement of the purposes outlined under point 1.2.
The data is stored in log files, but not processed. The log files are only looked at more closely in the event of an attack on the server. The log files are deleted after 14 days.
The data shall not be further retained in any form allowing to identify the data subject.
We shall call on service providers to provide and, in particular, to technically handle our website who shall process your data by our order (called “Processors”). We shall make use of the following Processors:
- CA Immobilien Anlagen Aktiengesellschaft und CA Immo Deutschland GmbH
- Website-Provider; (Internet Access Center Düsseldorf, Höherweg 270, 40231 Düsseldorf)
- Design agency; (Vanderlicht GmbH & Co. KG, Taunusstr. 63, 65183 Wiesbaden)
- Digital agency: (Inreal Technologies GmbH, Bahnhofplatz 12, 76137 Karlsruhe)
In addition, your data shall be disseminated to the following recipients, where necessary and appropriate:
- authorities (e.g. Labour Inspectorate, municipal, district administration and federal authorities, tax office, police / public prosecutor’s office, corporate/land register, OePR etc);
- legal representatives and notaries;
2. Cookies & Tracking
2.1. Definition of Cookies
Cookies are small text files stored on your terminal (PC/laptop, tablet or smartphone). These text files are downloaded by your browser the first time you visit our website. If this website is accessed once again using the same terminal/browser, the cookie and the information saved in it are either sent back to the respective website having generated them (first-party cookie) or sent to a different website to which they appertain (third-party cookie). In this way, the website “recognises” that this is the same user and adapts the presentation of website contents. Cookies thus “remember” your preferences, communicate how you use a site and individually adapt the displayed offerings to some extent.
2.2. Functionally Necessary Cookies
2.2.1. Data Processing Purpose
We shall use one functionally necessary cookie on our website. When using functionally necessary cookies, We shall process your personal data in order to provide basic functions of our website and of the services desired by you as well as to temporarily save your cookie settings. Functional restrictions would arise if these cookies would not be used. The specific purpose of the individual cookie shall follow from the table below.
2.2.2. Legal Basis
The legal basis for the processing of your data when using the functionally necessary cookie shall be our legitimate interests in both the provisioning of a fully functional website and of the services desired by you and the temporary saving of your cookie settings (point (f) of Art. 6(1) GDPR).
2.2.3. Data Types, Retention Period, Recipients
The following functionally necessary cookies shall be used on our website:
|Cookies||Data types||Purposes||Rentition period||Recipients|
Saves the settings of visitors who have selected cookies in the Borlabs cookie box
|1 year||Owner of this website|
2.3. Matomo Web Analysis
2.3.1. Data Processing Purpose
We use the “Matomo” open source web analysis tool setting not functionally necessary cookies to improve the user friendliness of our website. Then using not functionally necessary cookies and subsequently analysing the user data, We shall process personal data to learn about the preferences of our website visitors and in order to better personalise our offering. The specific purpose of the individual cookies shall follow from the table below.
2.3.2. Legal Basis
The legal basis for the processing of your data when using not functionally necessary cookies shall be your explicit consent (point (a) of Art. 6(1) GDPR). We shall neither set cookies for web analysis purposes nor process personal data without your explicit consent. A given consent given may be withdrawn at any time by making the adjustment here. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
2.3.3. Data Types, Retention Period, Recipients
The following not functionally necessary cookies shall be used on our website for web analysis purposes:
records the website from which you visit us
|6 month||ePrivacy Holding GmbH , Große Bleichen 21, 20354 Hamburg|
contains user-defined variables stipulated during the previous site view
|30 minutes||ePrivacy Holding GmbH, Große Bleichen 21, 20354 Hamburg|
retains a unique user ID
|13 month||ePrivacy Holding GmbH, Große Bleichen 21, 20354 Hamburg|
displays a visitor’s active session
|30 minutes||ePrivacy Holding GmbH, Große Bleichen 21, 20354 Hamburg|
This Processor shall call on a sub-processor, Amazon Web Services Inc., 410 Terry Avenue North, Seattle WA 98109, USA, to process data. Any and all data shall be processed by the sub-processor in Frankfurt, Germany. We cannot rule out nonetheless that our sub-processor will be obligated by US security authorities, for example, to disclose the data processed on the servers in Frankfurt due to its company being based in the USA. According to the European Court of Justice, the USA do not have an adequate level of data protection. We thus obligated our Processor to conclude standard contractual clauses with Amazon Web Services Inc. to ensure an adequate level of data protection and shall use this service only with your consent.
2.4. Modification of Your Cookie Settings
By making relevant browser settings, cookies will generally not be stored and/or cookies already stored will be deleted. You can block the storage of cookies in the first place or the storage of cookies by third-party providers and delete cookies already stored with all common browsers. If cookies are disabled for our website, it might no longer be possible to use all functions of the website in full.
3. Your Rights
As data subject, you shall have the following rights in relation to the processing of your personal data:
Right to Withdraw Consent
Where your data is processed based on your consent, you shall be entitled to withdraw your consent at any time. We shall no longer process this data in future as from receipt of your withdrawal. The withdrawal of consent shall not affect, however, the lawfulness of processing made up to the time of withdrawal.
Right of Access
You may demand access to the data processed on your person, in particular on the origin and categories of data processed, the retention period, the recipients to whom your personal data will be or were disclosed, the purpose or nature of processing. On demand, We shall provide you with a copy of your personal data processed by us.
We point out that no access is to be granted if this results in business or trade secrets of the controller or third parties being jeopardised.
Right to Rectification
If we process inaccurate or incomplete data on your person, you may demand its rectification or completion, even by giving a complementary notice.
Right to Erasure
You shall have the right to obtain from us erasure of personal data concerning you. We will gladly erase your data to the extent provided for by law (Art. 17 GDPR).
We point out that there shall be no right to erasure, in particular, if We must process the data to meet a legal obligation or in order to establish, exercise or defence legal claims.
Right to Restriction of Processing
Where it is not clear whether the data processed on your person is inaccurate or incomplete or processed unlawfully, you may obtain from us restriction of use of your personal data.
Right to Object
Even if the data on your person is accurate and complete and lawfully processed by us, you may object to the processing of this data in particular individual cases substantiated by you. You may also object if you receive direct marketing from us and do no longer want to it in future.
Right to Data Portability
If We process personal data you provided us of you, you may obtain from us transfer of this data to you in a machine-readable format under certain circumstances. You may also engage us to directly transfer this data to a third party selected by you, where this is technically feasible.
Right to Lodge a Complaint
Even if We make best efforts to ensure the protection and integrity of your data, disagreements about the way We use your data may not be ruled out. If you take the view that your data is processed in violation of the GDPR, you shall be free to both establish contact with our data protection coordination team and lodge a complaint with the Austrian data protection authority.
Regarding all of your concerns under data protection law, in particular to assert your rights, please contact in writing (by letter or e-mail) CA Immo Deutschland GmbH, Friedrich-Ebert-Anlage 35-37, 60327 Frankfurt am Main. Alternatively, you may also directly address our data protection officer (dsb[at]caimmo.com).