1. DATA PROTECTION OVERVIEW
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in our data protection statement below this introduction.
DATA COLLECTION ON OUR WEBSITE
Who is responsible for data collection on this website?
The website operator processes data on this website. Contact details for the website operator can be found on the legal information page of this website.
How do we collect your data?
Some of your data is collected when you share it with us. This may be data, for example, that you enter in a contact form.
Other data is automatically collected by our IT systems when you visit the website. This is primarily technical data (e.g. your internet browser, operating system or the time at which you access a page). This data is collected automatically as soon as you access our website.
What do we use your data for?
Some data is collected to ensure that our website operates without errors. Other data may be used to analyse your user behaviour.
What rights do you have concerning your data?
You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to request that your data be corrected, blocked or deleted. If you have further questions about data protection, you can contact us using the address provided on the legal information page of this website at any time. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You also have the right under certain circumstances to request that the processing of your personal data be restricted. Details on this are provided in the data protection statement under ‘Right of restriction of processing’.
Analysis tools and tools from third-party providers
Your internet surfing behaviour may be statistically analysed when you visit our website. This analysis is generally performed on an anonymous basis; your internet surfing behaviour cannot be used to identify you. You can object to this analysis or prevent it by not using certain tools. Detailed information on these tools and ways to object to their use can be found in the following data protection statement.
2. GENERAL INFORMATION AND REQUIRED INFORMATION
The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and observe the legal data protection regulations as well as the policy set out in this data protection statement.
Different personal data is collected when you use this website. Personal data is data that can be used to identify you personally. This data protection statement explains what data we collect and what we use it for. It also explains how it is collected and for what purpose.
Please be aware that transmitting data on the internet (such as in email correspondence) may be vulnerable to security gaps. It is impossible to guarantee complete protection of data from access by third parties.
INFORMATION ON THE DATA CONTROLLER
The data controller responsible for data processing on this website is:
ZAR Real Estate Holding GmbH
80335 Munich, Germany
Telephone: +49 (0)89 954 576 680
The controller is the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses and the like).
REVOCATION OF YOUR CONSENT FOR DATA PROCESSING
Many data processing tasks are only possible with your explicit consent. You can withdraw your consent at any time by simply sending us an informal email. The legality of the data processing which occurred prior to the revocation of your consent remains unaffected.
RIGHT TO OBJECT TO DATA COLLECTION IN SPECIAL CASES AND TO OBJECT TO DIRECT MARKETING (ART. 21 GDPR)
If data is processed on the basis of Article 6(1)(e) or (f) GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The relevant legal basis for processing can be found in this data protection statement. If you object, we will stop processing your relevant personal data unless we can demonstrate legitimate reasons for continuing to process your data that outweigh your interests, rights and freedoms, or unless processing your data serves to enforce, assert or defend a legal claim (objection pursuant to Article 21(1) GDPR).
Insofar as your personal data is processed for the purpose of carrying out direct marketing, you have the right at any time to object to the processing of the personal data concerning you for the purposes of such marketing; this also applies to profiling if it is in conjunction with such direct marketing. If you object, your personal data will then no longer be used for direct marketing purposes (objection pursuant to Article 21(2) GDPR).
RIGHT TO LODGE A COMPLAINT WITH THE COMPETENT SUPERVISORY AUTHORITY
In cases of violations of the GDPR, those affected have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, workplace or the location where the suspected violation occurred. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.
RIGHT TO DATA PORTABILITY
You have the right to have data that we automatically process based on your consent or the performance of a contract provided to yourself or to a third party in a commonly used, machine-readable format. If you request the direct transmission of the data to another controller, this will only take place if technically feasible.
SSL OR TLS ENCRYPTION
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential information, such as the orders or queries you send to us as the website operator. You can tell that a connection is encrypted by looking at the address line of your browser and noting that ‘http://’ has changed to ‘https://’ and seeing the lock icon in the browser line.
If SSL or TLS encryption is activated, the data you send us cannot be viewed by third parties.
INFORMATION, RESTRICTION, DELETION AND CORRECTION
Under applicable legal provisions, you have the right at any time to be informed free of charge of the personal data concerning you that is stored, its origin and recipient, and the purpose for data processing, and you have the right to have this data corrected or deleted, or its processing restricted. If you have further questions about personal data, you can contact us using the address provided on the legal information page of this website at any time.
RIGHT TO RESTRICT PROCESSING
You have the right to request that the processing of your personal data be restricted. If you have further questions about this, you can contact us using the address provided on the legal information page of this website at any time. The right to restrict processing exists in the following cases:
If you context the accuracy of the personal data concerning you which we store, we usually need time to look into this. While we are checking the accuracy of the data, you have the right to request that the processing of your personal data be restricted.
If your personal data was or is being processed unlawfully, you can request that the processing of the data be restricted instead of the data being deleted.
If we no longer need your personal data but you need it in order to assert, defend or enforce a legal claim, you have the right to request that the processing of your personal data be restricted instead of the data being deleted.
If you have raised an objection pursuant to Article 21(1) GDPR, your interests and ours have to be weighed. While it remains undetermined which party’s interests outweigh the other’s, you have the right to request that the processing of your personal data be restricted.
If you have restricted the processing of your personal data, this data will, with the exception of storage, only be processed with your consent or for the enforcement, assertion or defence of a legal claim or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
OBJECTION TO MARKETING EMAILS
The contact details published as part of our obligation to provide legal information must not be used to send us unsolicited advertising or information materials. The website operators explicitly reserve the right to take legal action in the event that unsolicited marketing information, through spam emails, for example, is sent.
3. DATA COLLECTION ON OUR WEBSITE
SERVER LOG FILES
The website provider automatically collects and stores information in what is known as server log files, which your browser automatically transmits to us. This information includes:
Browser type and version
Operating system used
Host name of the computer accessing the site
Time of server query
This data is not compiled with data from other sources.
This data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the error-free display and optimisation of its website, and server log files are necessary for this purpose.
If you submit queries to us via contact form, we will store your information from the form, including the contact details you provide there, for the purposes of processing your query and in case of follow-up questions. We will not pass on this data without your consent.
The processing of the data entered in the contact form takes place solely on the basis of your consent (Article 6(1)(a) GDPR). You can withdraw your consent at any time by simply sending us an informal email. The legality of the data processing which occurred prior to the revocation of your consent remains unaffected.
The data entered by you in the contact form shall be held by us until you request its deletion, withdraw your consent for it to be stored or until the purpose for storing the data no longer applies (e.g. once your query has been fully processed). Compulsory legal provisions – especially those concerning retention periods – remain unaffected.
QUERY BY EMAIL, TELEPHONE OR FAX
If you contact us by email, telephone or fax, your query including all of the personal data arising from it (your name, the query itself) will be stored and processed by us for the purpose of processing your query. We will not pass on this data without your consent.
This data is processed on the basis of Article 6(1)(b) GDPR, insofar as your query relates to the performance of a contract or is required in order to perform pre-contractual tasks. In all other cases, the data is processed on the basis of your consent (Article 6(1)(a) GDPR) and/or on the basis of our legitimate interests (Article 6(1)(f) GDPR), as we have a legitimate interest in effectively processing the queries directed at us.
The data sent by you to us in your query shall be held by us until you request its deletion, withdraw your consent for it to be stored or until the purpose for storing the data no longer applies (e.g. once your query has been fully processed). Compulsory legal provisions – especially those concerning legal retention periods – remain unaffected.
PROCESSING OF DATA (CUSTOMER AND CONTRACT DATA)
We collect, process and use personal data only where it is necessary for the establishment of, content-related design of or amendment to the legal relationship (existing data). These activities occur on the basis of Article 6(a)(b) GDPR, which permits the processing of data in order to perform a contract or a pre-contractual task. We collect, process and use personal data through the use of our website (usage data) only where it is necessary in order to enable or charge the user to use the service.
The collected customer data is deleted upon conclusion of the order or termination of the business relationship. Legal retention periods remain unaffected.
5. PLUGINS AND TOOLS
GOOGLE WEB FONTS
This website uses what is known as ‘web fonts’ provided by Google to ensure that fonts are displayed uniformly. When you visit a page of the website, your browser loads the required web fonts in your browser cache in order to correctly display text and fonts.
For this purpose the browser you use must establish a connection to Google’s servers. As a result, Google is informed that our website was accessed by your IP address. Google Web Fonts are used in the interest of displaying our website in a uniform and visually appealing way. This constitutes a legitimate interest as defined in Article 6(1)(f) GDPR.
If your browser does not support web fonts, a standard font from your computer is used.
This website uses the Google Maps service via an API. The service provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Your IP address must be stored in order to use Google Maps functions. This information is generally transmitted to a Google server in the USA and stored there. The provider of this website has no influence on this data transmission.
Google Maps is used in the interest of displaying our website in a visually appealing way and making it easy to find the locations mentioned by us on the website. This constitutes a legitimate interest as defined in Article 6(1)(f) GDPR.