Privacy information

This privacy policy informs you about our handling of your data. So that the processing of your data is comprehensible to you, we would like to provide you with an overview of this processing with the following information. In order to ensure fair processing, this privacy statement contains general information about our handling of your data as well as information about your rights under the European General Data Protection Regulation (GDPR) (German: Europäische Datenschutz-Grundverordnung, or “DSGVO”) and the German Federal Data Protection Act (German: “Bundesdatenschutzgesetz”, or “BDSG”).

We also inform you in detail about

• General data
• Data processing on our website
• Other data processing

ROBERT VOGEL GmbH & Co Kommanditgesellschaft (hereinafter referred to as "we" or "us") is responsible for data processing.

General data

Contact

If you have any questions or suggestions about this information, or if you would like to contact us about asserting your rights, please send your request to

ROBERT VOGEL GmbH & Co Kommanditgesellschaft
Warburgstraße 50
20354 Hamburg

Phone +49 40 35 55 10
E-Mail kontakt@robertvogel.de

Legal basis

The term "personal data" under data protection law refers to all information that relates to an identified or identifiable individual.

We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. Data processing by us only takes place based on a legal permission. We process personal data only with your consent (Art. 6 para. 1 letter a) GDPR), for the performance of a contract to which you are a party or at your request for the performance of pre-contractual measures (Art. 6 (1) (b) GDPR), for the fulfillment of a legal obligation (Art. 6 para.1 letter c) GDPR) or where processing is necessary for the purposes of protecting our legitimate interests or the legitimate interests of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require the protection of personal data (Article 6(1)(f) GDPR).

Duration of storage

Unless otherwise stated in the following notes, we store the data only for as long as is necessary to achieve the processing purpose or to fulfill our contractual or legal obligations. Such legal retention obligations may arise in particular from commercial or tax law regulations.

Categories of recipients of the data

We use processors as part of the processing of your data. Processing operations carried out by such processors include, for example, hosting, maintenance and support of IT systems, customer and order management, order processing, accounting and billing, marketing measures or file and data carrier destruction. A processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the data controller. Processors do not use the data for their own purposes, but carry out data processing exclusively for the controller and are contractually obligated to ensure appropriate technical and organizational data protection measures.

In addition, we may transfer your personal data to bodies such as postal and delivery services, house bank, tax advisor/auditor or the tax authorities.

If your data is transferred to other recipients, we will inform you under the respective processing procedure

Data transfer to third countries

Our data processing operations may involve the transfer of certain personal data to third countries, i.e. countries where the GDPR is not applicable law. Such a transfer takes place in a permissible manner if the European Commission has determined that an adequate level of data protection is required in such a third country. If such an adequacy decision by the European Commission does not exist, a transfer of personal data to a third country will only take place if appropriate safeguards exist pursuant to Art. 46 GDPR or if one of the conditions of Art. 49 GDPR is met.

Unless otherwise stated below, we use the EU standard data protection clauses as appropriate safeguards for the transfer of personal data in third countries. You have the possibility to receive a copy of these EU standard data protection clauses or to inspect them. To do so, please contact us at the address given under Contact.

If you consent to the transfer of personal data to third countries, the transfer will take place on the legal basis of Article 49 (1) a GDPR.

Processing when exercising your rights according to Art. 15 to 22 GDPR

If you exercise your rights in accordance with Articles 15 to 22 of the GDPR, we will process the personal data provided for the purpose of implementing these rights by us and to be able to provide evidence thereof. We will process data stored for the purpose of providing information and preparing it only for this purpose and for data protection control purposes and otherwise restrict processing in accordance with Art. 18 GDPR. These processing operations are based on the legal basis of Art. 6 para. 1 lit. c) GDPR in conjunction with. Art. 15 to 22 GDPR and Section 34 (2) BDSG.

Your rights

As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:

• In accordance with Art. 15 GDPR and § 34 BDSG, you have the right to request information about whether and, if so, to what extent we are processing personal data relating to you or not.
• You have the right to demand that we correct your data in accordance with Art. 16 GDPR.
• You have the right to demand that we delete your personal data in accordance with Art. 17 GDPR and § 35 BDSG.
• You have the right to have the processing of your personal data restricted in accordance with Art. 18 GDPR.
• You have the right, in accordance with Art. 20 GDPR, to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format, and to transfer this data to another controller.
• If you have given us separate consent to data processing, you may revoke this consent at any time in accordance with Art. 7 (3) GDPR. Such a revocation does not affect the lawfulness of the processing that was carried out on the basis of the consent until the revocation.
• If you believe that a processing of personal data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.

Right of objection

In accordance with Art. 21 (1) GDPR, you have the right to object to processing based on the legal basis of Art. 6 (1) e) or f) GDPR on grounds relating to your particular situation. If we process personal data about you for the purpose of direct marketing, you may object to this processing in accordance with Art. 21 (2) and (3) GDPR.

Data Protection Officer

You can reach our data protection officer at the following contact details: datenschutz@robertvogel.de

Data processing on our website

When you use the website, we collect information that you provide yourself. In addition, during your visit to the website, certain information about your use of the website is automatically collected by us. In data protection law, the IP address is also generally considered to be a personal data. An IP address is assigned to every device connected to the Internet by the Internet provider so that it can send and receive data.

Server log files processing

During the purely informative use of our website, general information that your browser transmits to our server is initially stored automatically (i.e. not via registration). This includes by default: browser type/version, operating system used, requested page, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 (1) f) GDPR. This processing serves the technical administration and security of the website. The stored data is deleted after seven days, unless there is a justified suspicion of unlawful use based on concrete indications and further examination and processing of the information is necessary for this reason. We are not able to identify you as a data subject on the basis of the stored information. Articles 15 to 22 of the GDPR therefore do not apply pursuant to Article 11 (2) of the GDPR, unless you provide additional information that enables us to identify you in order to exercise your rights set out in these articles.

Cookies

We use cookies and similar technologies ("cookies") on our website. Cookies are small data sets that are stored by your browser when you visit a website. This identifies the browser used and can be recognized by web servers. You have full control over the use of cookies through your browser. You can delete the cookies in the security settings of your browser at any time. You can object to the use of cookies through your browser settings in principle or for specific cases.

The use of cookies is partly technically necessary for the operation of our website and thus permissible without the consent of the user. In addition, we may use cookies to offer special features and content and for analysis and marketing purposes. These may also include cookies from third-party providers (so-called third party cookies). We only use such technically unnecessary cookies with your consent in accordance with Section 25 (1) TTDSG. Information about the purposes, providers, technologies used, stored data and the storage period of individual cookies can be found in the cookie settings of our Consent Management Tool, which you can view below.

Contact form

Our website contains a contact form that you can use to send us messages. The transfer of your data is encrypted (recognizable by the "https" in the address line of the browser). All data fields marked as mandatory are required to process your request. Failure to provide this information will result in us not being able to process your request. The provision of further data is voluntary. Alternatively, you can send us a message via the contact e-mail. We process the data based on our legitimate interest in contacting inquiring persons. The legal basis for the data processing is then Art. 6 para. 1 letter f) GDPR.

daCaptcha

To make our website more secure and protect us from bot attacks, we use daCaptcha, a service provided by PuroNectar oHG. To integrate the service, a temporary processing of your IP address is required. This is only stored as a one-way hash and cannot be decrypted again. The processing of your data is based on our legitimate interest pursuant to Art. 6 (1) f GDPR in ensuring the security of our website. For more information on data protection at daCaptcha, please see the privacy policy at dacaptcha.de/userinformationen/.

Google Maps

We use Google Maps from Google Ireland Limited (Ireland, EU) on our website to display maps and for virtual tours. For such an integration, a processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to Google and Google may set its own cookies.

The processing of your data is based on our legitimate interests according to Art. 6 para. 1 lit. f GDPR.

By using the two-click solution, we ensure that no data is transmitted to Google before using the map function. For more information on data protection at Google, please refer to Google's privacy policy at www.google.com/policies/privacy.

Other data processing

Contact us by e-mail

If you send us a message via the contact e-mail provided, we will process the transmitted data for the purpose of responding to your inquiry. We process this data based on our legitimate interest to get in touch with inquiring persons. The legal basis for the data processing is Art. 6 para. 1 letter f) GDPR. Please also refer to our data protection notice for tenants and prospective tenants www.robertvogel.de/mieterinformationen/.

Applications

If you apply to our company, we process your application data exclusively for purposes related to your interest in current or future employment with us and the processing of your application. Your application will only be processed and noted by the relevant contacts at our company. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. If we are unable to offer you employment, we will retain the data you have provided for up to six months after any rejection for the purpose of answering questions relating to your application and rejection. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence, or if you have expressly consented to longer storage. The legal basis for data processing is Section 26 (1) sentence 1 BDSG. If we store your applicant data beyond a period of six months and you have expressly consented to this, we would like to point out that this consent can be freely revoked at any time in accordance with Art. 7 (3) GDPR. Such revocation shall not affect the lawfulness of the processing that was carried out on the basis of the consent until the revocation.

Cookies set directly by the website:

• PHPSESSID

  • Type: Session
  • SameSite: Lax

• PNCC_NEW

  • Type: Cookie
  • SameSite: None
  • Valid: 6 Monate
  This cookie stores the cookie settings.

Other cookies may be set by third-party providers.