Protecting your data is very important to us. Your data will be processed according to the General Data Protection Regulation GDPR.
Data protection information (information obligations according to art. 13 General Data Protection Regulations GDPR)
In our opinion, data protection should be transparent, easy to understand and, above all, fair for all parties. For this reason, we would like to inform you in this data protection notice on the one hand about which personal data we collect and use from you, whether and if so, to which third parties these may be passed on, how long we store the data and what rights you have, if you do not agree with our responsible handling. Should there still be any questions after this detailed data protection notice, please do not hesitate to contact us using the contact details below.
Definitions
So that we start from the same prerequisites, we first want to clarify some definitions at this point. This ensures that everyone involved knows what we are talking about and what we are talking about in the following information.
Personal data: This is all information that relates to an identified or identifiable natural person (hereinafter „data subject“). A natural person is considered to be identifiable if he or she can be identified directly or indirectly, in particular by assigning an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics, the expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
Processing: Processing is any process or series of processes carried out with or without the help of automated processes in connection with personal data such as the collection, recording, organization, ordering, storage, adaptation or modification, reading, querying, use, disclosure by transmission, distribution or any other form of provision, comparison or linking, restriction, deletion or destruction.
Restriction of processing: This means the marking of stored personal data with the aim of restricting their future processing.
Profiling: Any type of automated processing of personal data, which consists in the fact that this personal data is used to evaluate certain personal aspects relating to a natural person, in particular aspects relating to work performance, economic situation, health, personal preferences; analyzing or predicting the interests, reliability, behavior, location or change of location of this natural person is called profiling.
Pseudonymization: With pseudonymization, the processing of personal data is carried out in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organizational measures that ensure that the personal data are not assigned to an identified or identifiable natural person.
Controller: This is the natural or legal person, public authority, agency or other body that alone or together with others decides on the purposes and means of processing personal data; If the purposes and means of this processing are specified by Union law or the law of the Member States, the controller or the specific criteria for his naming can be provided according to Union law or the law of the Member States.
Recipient: Any natural or legal person, public authority, agency or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, authorities that may receive personal data as part of a specific investigation mandate under Union law or the law of the Member States are not considered recipients; The processing of this data by the aforementioned authorities is carried out in accordance with the applicable data protection regulations in accordance with the purposes of the processing.
Third party: This is a natural or legal person, public authority, agency or other body, apart from the data subject, the controller, the processor and the persons who are authorized to process the personal data under the direct responsibility of the controller or processor.
Consent: This is any expression of will voluntarily given by the data subject for the specific case, in an informed manner and unequivocally, in the form of a declaration or other clear confirmatory act, with which the data subject indicates that they are processing the data subject personal data agrees.
1. Name and contact details of the controller
The person responsible for data processing is
PROPERTY & MARKETING
International
Beata Julia Wyczynski
Company Owner
Schevemorer Landstr. 11
D-28325 Bremen
You can reach us by post, email at property.marketing(at)beatajulia.com or by phone +49 421 17526975 or +49 152 22449387
2. Collection of personal data when used for informational purposes
If you only use the website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you would like to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is art. 6 para. 1 S. 1 lit. f GDPR):
° IP address
° date and time of the request
° time zone difference to Greenwich Mean Time (GMT)
° content of the request (specific page)
° access status / HTTP status code
° data volume transferred in each case
° website from which the request comes
° browser
° operating system and its surface
° language and version of the browser software
3. Use of cookies
We use cookies on our website.
Cookies are small text files
° that are assigned and stored on your hard drive to the browser you use by a characteristic string of characters
° and through which certain information flows to the location that sets the cookie.
Cookies cannot run programs or transmit viruses to your computer and therefore do no damage. They serve to make the internet offer more user-friendly and effective overall, that is, more pleasant for you.
Cookies can contain data that make it possible to recognize the device used. In some cases, cookies only contain information about certain settings that are not personal. However, cookies cannot directly identify a user.
A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are saved beyond the individual session. With regard to their function, a distinction is made between cookies:
Technical cookies: These are absolutely necessary in order to move around the website, use basic functions and ensure the security of the website; they do not collect information about you for marketing purposes, nor do they store which websites you have visited;
Performance cookies: These collect information about how you use our website, which pages you visit and e.g. whether errors occur when using the website; they do not collect information that could identify you; all information collected is anonymous and is only used to improve our website and to find out what our users are interested in;
Any use of cookies that is not absolutely technically necessary represents data processing that can only be carried out with your express and active consent. Art. 6 para. 1 sentence 1 lit. a GDPR is allowed. This applies in particular to the use of advertising, targeting or sharing cookies. In addition, we only pass on your personal data processed by cookies to third parties if you have given express consent to this in accordance with art. 6 para. 1 s. 1 lit. a GDPR.
4. Use of functions of our website
In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do this, you usually have to provide further personal data that we use to provide the respective service. If additional voluntary information is possible, it is marked accordingly.
When you contact us by email or using the contact form, we will save your email address and, if you have provided it, your name and telephone number to answer your questions. (The legal basis is art. 6 para. 1 s. 1 lit. b GDPR)
When using the form for the property search, your personal data such as first name, last name, telephone number, adress and email address and, if you indicate, business name, website and webname as well as the criteria for your property request will be stored by us with the aim of being able to find a suitable property for you. (The legal basis is art. 6 para. 1 s. 1 lit. b GDPR)
5. Data transfer to third parties
We will only pass on your personal data to third parties if we offer campaign participation, competitions, bookings or contracts together with a third party. In this case, you will be advised separately of the transfer to third parties before passing on your data.
We sometimes use external service providers to process your data. These were carefully selected by us and commissioned in writing. They are bound by our instructions and are regularly checked by us. The service providers will not pass this data on to third parties. If these service providers are located in the USA, we will inform you of this in connection with the respective functions. This data processing also takes place in accordance with the applicable legal situation.
5.1. Recipients or categories of recipients
If we pass on your personal data to third parties, you will be explicitly informed of this in the description of the respective data processing (e.g. when using our contact form). Of course, we also use external service providers for the technical and organizational processing, with whom we have corresponding order processing contracts in the sense of art. 28 GDPR. These are e.g. service provider for web hosting, sending emails, maintenance and care of our IT systems etc.
5.2. Google Fonts
We use so called Google fonts on our website. Fonts are loaded from Google servers that serve to improve the design of the website. The data processing takes place on the basis of a balance of interests, whereby our interest consists in an appealing design of the website, Art. 6 Para. 1 f GDPR.
The fonts in question are loaded from Google servers, which are usually located in the USA. The appropriate level of data protection is guaranteed by Google (list entry „Privacy Shield“).
6. Storage period
Your data will be stored for as long as is absolutely necessary to achieve the respective purpose, but at the longest as long as any legal regulations require us to do so (e.g. under commercial law, we are obliged to keep business letters, which can also include emails, for 10 years).
As soon as the storage purpose no longer applies or a storage period prescribed by the aforementioned regulations expires, the personal data will be routinely blocked or deleted.
7. Your rights
In this section we would like to inform you comprehensively about your rights.
7.1. Right to information
You have the right to request information from us at any time as to whether your personal data are processed by us. If this is the case, you are entitled to information regarding the information mentioned in art. 15 para. 1 2nd half sentence GDPR.
You have the right to request information as to whether the personal data concerning you are transferred to a third country or to an international organization. In this context, you can request the appropriate guarantees in accordance with art. 46 GDPR to be informed in connection with the transmission.
7.2. Right to rectification
Furthermore, according to art. 16 GDPR, you have the right to request that we immediately correct the incorrect personal data concerning you. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data, also by means of a supplementary declaration.
7.3. Right to erasure („right to be forgotten“)
You also have the right to request that we delete your personal data immediately. We are obliged to comply with this request and to delete personal data, unless we are legally obliged or entitled to further process your data. For details, please refer to art. 17 GDPR.
7.4. Right to restriction of processing
You have the right to request that we restrict processing, provided the legal requirements pursuant to section 18 GDPR are met.
7.5. Right to be informed
According to art. 19 GDPR, you have the right to correction, deletion or restriction of processing, we are obliged to notify all recipients to whom your personal data has been disclosed of this correction or deletion of the data or restriction of processing unless this turns out to be impossible or involves a disproportionate effort. You have the right towards us to be informed about these recipients.
7.6. Right to data portability
If we process your data with your consent or on the basis of a contract, you have the right to receive the personal data concerning you in a structured, common and machine-readable format. You also have the right to transfer this data to another person responsible, provided that the legal requirements under art. 20 GDPR are met.
7.7. Right to object
7.7.1. Right to object on a case-by-case basis
You have the right to file an objection for reasons arising from their particular situation, at any time against the processing of your personal data, which is based on art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions.
We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.
7.7.2. Right to object to the processing of data for direct marketing purposes
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is connected to such direct advertising.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Regardless of Directive 2002/58/EC, you have the option of exercising your right to object in connection with the use of information society services using automated procedures that use technical specifications.
7.8. Right to withdraw the data protection declaration of consent
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before the withdrawal.
7.9. Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, that has legal effect on you or similarly significantly affects it. This does not apply when making the decision
a. is necessary for the conclusion or performance of a contract between you and the controller,
b. is permissible on the basis of legal provisions of the Union or of the Member States to which the controller is subject and these legal provisions contain appropriate measures to safeguard your rights and freedoms as well as your legitimate interests or
c. with your express consent.
However, these decisions may not be based on special categories of personal data according to art. 9 para. 1 GDPR, unless art. 9 para. 2 lit. a or g applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
With regard to the in a and c in the above-mentioned cases, the controller takes appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, which includes at least the right to obtain intervention from the controller, to state your own point of view and to contest the decision.
7.10. Right to lodge a complaint
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged violation, if you believe that the processing of your personal data violates the GDPR.
The supervisory authority to which the complaint was submitted will inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy in accordance with art. 78 GDPR.
The supervisory authority responsible for us is:
The State Commissioner for Data Protection and Freedom of Information
Die Landesbeauftragte für Datenschutz und Informationsfreiheit
Arndtstrasse 1
27570 Bremerhaven
Tel +49 421 3612010 or +49 471 5962010
Fax +49 421 49618495
email office(at)datenschutz.bremen.de
8. Legal basis for processing
As far as not already mentioned in the individual processing under the previous paragraphs, we show below the legal basis on which we carry out the data processing.
Insofar as we obtain the data subject’s consent for the processing of personal data, art. 6 para. 1 lit. GDPR is the legal basis.
When processing personal data, which is necessary for the performance of a contract to which the data subject is a party, art. 6 para. 1 lit. b GDPR is the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, art. 6 para. 1 lit. c GDPR is the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, art. 6 para. 1 lit. d GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.