DATA PROTECTION

 

INTRODUCTION

This privacy notice clarifies the nature and scope of the personal data which is collected and used by CV real Estate AG (hereinafter 'we' or 'us') on the cv-real-estate.com website (hereinafter the 'Website'), and the purposes for which it is collected and used. We are the controller for all personal data collected on the website, unless otherwise stated in this privacy notice.

Personal data is information that makes it possible to identify a person, i.e. information that can be traced back to an individual. This typically includes their name, email address or phone number. Purely technical data which can be attributed to a person is also regarded as personal data.
 

CONTROLLER’S CONTACT DETAILS:
CV Real Estate AG
Möhlstraße 12
81675 Munich
Germany
Phone.: +49 89 44 23 849 0
E-Mail: info[at]cv-real-estate.com


YOUR RIGHTS
You have the right to be informed about the personal data that has been stored about you, free of charge and on request. You also have the right to correct incorrect data, the right to require that the processing of data be restricted where it has been processed too extensively, and the right to have data erased where it has been processed or stored for too long (unless there is a statutory obligation to store data and no other reasons under GDPR Art. 17(3) apply). In addition, you have the right to receive all data that you have provided to us, in a commonly used file format (right to data portability), insofar as you provided the data to us pursuant to a declaration of consent or in order to perform a contract. Where you also have a right to object to specific categories of processing, we indicate this where we describe those individual categories. To exercise your rights, just send an email to info[at]cv-real-estate.com.

In addition, you also have the right to file a complaint with a data protection supervisory authority. A list of German and European data protection commissioners and their contact details can be found via the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

VOLUNTARY PROVISION OF DATA
There is no general legal or contractual requirement to provide your personal data on this website. You are not obliged to provide personal data on this website. Nevertheless, it is necessary to process your personal data in order to provide the functionality of this website.
 

WHO RECEIVES YOUR DATA
We do not disclose personal data unless we expressly mention it in this privacy statement. However, this website is hosted by our service provider domainfactory GmbH, Oskar-Messter-Str. 33 85737 Ismaning. To do so, domainfactory GmbH will automatically process the above personal data. It does this entirely according to our instructions and on our behalf, on the basis of a processing contract within the meaning of GDPR Art. 28.

Personal data is transferred to the above contractor on the basis of GDPR Art. 6(1)(f). This permits the processing of personal data where that is in our ‘legitimate interest’, unless that is outweighed by your fundamental rights, your fundamental freedoms or your interest in your data not being processed. Our legitimate interest lies in the use of specialised contractors who can host our website more efficiently than we can. However, you may object to this processing at any time if you have reasons relating to your particular situation which militate against the transfer of personal data to a server contractor. To do so, just send an email to info[at]cv-real-estate.com.
 

INFORMATION AND COOKIES
Cookies are small text files that are stored on your device by the browser used when you visit our website. Some services on websites use them to ‘recognise’ you and ‘remember’ what settings you have made. In this way they make websites more user-friendly, and so they help users, e.g. by storing login data. Cookies are also used to collect statistical data on the use of the website, and to use the data thus obtained for analysis and marketing purposes.

Some cookies are automatically deleted from your device as soon as you leave the website (so-called session cookies). Other cookies are stored for a certain period of time, which never exceeds two years (persistent cookies). We also use third-party cookies, which are managed by third parties, to provide certain services.

You can exercise control over the use of cookies. Most browsers have an option allowing the storage of cookies to be restricted or completely prevented. However, it should be noted that use of our website, and particularly ease of use, may be restricted without cookies.

Personal data is processed on this website for the following purposes:

1. MAILING LIST (NEWSLETTER)
We use the email address that you have entered to include you in our mailing list and to send you the latest news from CV Real Estate AG.
 

LEGAL BASIS
Data is processed for this purpose on the basis of your consent, which you gave when you registered for the mailing list. According to GDPR Art. 6(1)(a), data can be processed if you have consented to processing for the purpose of receiving press information.
 

DURATION OF STORAGE
The personal data stored pursuant to your registration for our mailing list will be deleted if you successfully deregister from the mailing list.
 

2. SERVER LOG FILES
Each time the website is accessed, we automatically collect certain technical personal data.
These are:

  • User’s IP address
  • Name of the website or file accessed
  • Date and time of the access
  • Amount of data transmitted
  • Report of successful retrieval
  • Browser type and version
  • User’s operating system
  • User's terminal device, including MAC address
  • Referrer URL (page previously visited)

This data is not combined with other personal data that you actively provide on the website. We collect server log files for the purpose of administering the website and so that we can detect and prevent unauthorised access.
 

LEGAL BASIS
This personal data contained in log files is processed on the basis of GDPR Art. 6(1). This permits the processing of personal data pursuant to the controller's ‘legitimate interest’, unless that is outweighed by your fundamental rights, your fundamental freedoms or your own interests. Our legitimate interest lies in facilitating administration and the ability to detect and track hacking. You may object to this processing at any time if you have reasons relating to your particular situation which militate against the processing of your data. To do so, just send an email to info[at]cv-real-estate.com.
 

WHAT ARE IP ADDRESSES?
IP addresses are assigned to each device (e.g. smart phone, tablet, PC) that is connected to the Internet. The actual IP address depends on the access point via which your device is currently connected to the Internet. It can be the IP address assigned to you by your Internet service provider, for example if you are connected to the Internet at home via your wireless LAN. It can also be an IP address assigned to you by your mobile service provider, or the IP address of a public or private wireless LAN provider or another Internet access provider. In its most common form (IPv4), the IP address consists of four blocks of digits. As a private user, usually you will not use a fixed IP address, because they are only temporarily assigned by your provider (so-called ‘dynamic IP addresses’). In principle, permanently assigned IP addresses (so-called ‘static IP addresses’) make it easier to attribute user data clearly. We do not relate this this data to individuals, other than for the purpose of tracking unauthorised access to our website; we use it only on an anonymised basis, to evaluate which of our web pages are preferred, how often they are accessed each day and so on.
 

DURATION OF STORAGE
The server log files with the above data are automatically deleted after 3 days. We reserve the right to store the server log files for a longer period if there are indications suggesting illegal access (such as an attempt at hacking or a so-called DDOS attack).
 

3. MAKING CONTACT
When you contact us (for example via the contact form), the information that you enter is stored for the purpose of processing your enquiry and in case there are further questions.
 

LEGAL BASIS
The information provided in relation to your contact is processed on the basis of GDPR Art. 6(1)(a) and (f). This permits the processing of personal data pursuant to the controller's ‘legitimate interest’, unless that is outweighed by your fundamental rights, your fundamental freedoms or your own interests. Our legitimate interest lies in processing your contact. You may object to this processing at any time if you have reasons relating to your particular situation which militate against the processing of your data. To do so, just send an email to info[at]cv-real-estate.com.
 

STORAGE PERIODE
The personal data stored in relation to your contact will be deleted if the matter for which you contacted us has been completely resolved and it is not anticipated that this particular contact will be relevant again in the future.
 

4. GOOGLE ANALYTICS
This website uses Google Analytics, a web analysis service provided by Google LLC (‘Google’), 1600, Amphitheater Parkway, Mountain View, CA 94043, USA. Google Analytics uses several ‘cookies’ (see above) to identify your browser. The information on your use of this website generated by the cookie is normally transferred to a Google server in the USA and stored there. However, we have activated the IP anonymisation function on this website, so that Google first abridges your IP address within European Union member states, or other states which are party to the European Economic Area Treaty. Only in exceptional cases will the whole of your IP address be transferred to a Google server in the USA, where it will be abridged. Google will use this information on behalf of the operator of this website in order to evaluate your use of the website, to compile reports on activity on the website and to provide further services to the operator of this website in connection with the use of the website and of the internet. The IP address transmitted by your browser when we use Google Analytics is not combined with other Google data. For those exceptional cases in which personal data is transferred to the USA, Google has undertaken to abide by the EU-US Privacy Shield – see https://www.privacyshield.gov/EU-US-Framework.


LEGAL BASIS
We rely on GDPR Art. 6(1)(f) for the processing of personal data by Google Analytics. This permits the processing of personal data pursuant to the controller's ‘legitimate interest’, unless that is outweighed by your fundamental rights, your fundamental freedoms or your own interests. Our legitimate interest lies in analysing the use of our website. You can also prevent the transmission of the data generated by the cookie relating to your use of website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available via the following link: http://tools.google.com/dlpage/gaoptout?hl=en.


DURATION OF STORAGE
The link to your identity is immediately removed by partially deleting the IP addresses, so that only statistical data is stored.