Data Protection
1. DATA PROTECTION AT A GLANCE
GENERAL INFORMATION
The following information is designed to give you a simple overview of what will happen to your personal data when you visit our website. The term “personal data” is used below to refer to any data with which you can be personally identified. You can find detailed information on data protection in our privacy statement below.
DATA COLLECTION ON OUR WEBSITE
Who is responsible for the collection of data on this website?
The data processing on this website is performed by the website operator, whose contact details can be found in our legal notice.
How will we collect your data?
Some of the data we collect will be provided by you. This may include data that you enter in a contact form.
Other data will be collected by our IT systems automatically when you visit our website. This particularly includes technical data (e.g. your Internet browser, operating system or the time of your visit). This data will be collected automatically as soon as you access our website.
What will we use your data for?
Some of your data will be collected to ensure the correct presentation of our website. Other data may be used to analyse your user behaviour.
What rights do you have with regard to your data?
You have the right to obtain free information about the source, recipients and purpose of your stored personal data at any time. You also have the right to request the rectification, blocking or erasure of your data. If you have any questions about the information provided on this page or any other aspects of data protection, please contact us by referring to the details indicated in our legal notice. Furthermore, you are entitled to lodge a complaint with the competent supervisory authority.
You also have the right to request the restriction of the processing of your personal data under certain circumstances. For more details, please refer to the section on your right to the restriction of processing in our privacy statement.
Analytical and third-party tools
Your surfing habits may be statistically evaluated when you visit our website. As this analysis is usually anonymous, it will not be possible to trace your surfing habits back to you. You can object to this analysis or prevent it by not using certain tools. You can find more detailed information on such tools and your right to object in the privacy statement below.
2. GENERAL AND MANDATORY INFORMATION
PRIVACY STATEMENT
The website operator takes the protection of your personal data very seriously. We will treat your personal data confidentially in accordance with the applicable data protection regulations and this privacy statement.
Various forms of personal data will be collected when you use this website. The term “personal data” is used below to refer to any data with which you can be personally identified.The aim of this privacy statement is to make you aware of the data that will be collected when you visit our website and to explain how we will use this data. We will also provide more information on the purposes of our data processing.
Please note that data transferred via the Internet (e.g. email communication) may be affected by security issues. Data cannot be completely protected against third-party access.
INFORMATION ON THE CONTROLLER
The party responsible for data processing (“controller”) on this website is:
ZAR Real Estate Holding GmbH & Co. KG
Maximiliansplatz 12b
D-80333 München
Tel.: +49 89 9545766-80
Email: office@zar-holding.com
The “controller” is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses).
RIGHT TO WITHDRAW YOUR CONSENT TO DATA PROCESSING
Many data processing operations are only possible with your express consent. You may withdraw your consent at any time. You can do this by notifying us informally via email. If you withdraw your consent, however, this will not affect the lawfulness of any data processing performed up to that point in time.
RIGHT TO OBJECT TO DATA COLLECTION IN PARTICULAR CASES AND TO DIRECT ADVERTISING (ART. 21 GDPR)
If your personal data is being processed on the basis of point (e) or (f) of Art. 6 (1) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data, including any profiling based on those provisions. The relevant legal basis for each type of processing can be found in this privacy statement. If you file an objection, we will only continue to process your personal data if we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or if your personal data is processed for the establishment, exercise or defence of legal claims (right to object pursuant to Art. 21 (1) GDPR).
If your personal data is being processed for direct marketing purposes, you may always object to the processing of your personal data for such purposes, including any profiling related to such direct marketing. If you object, we will no longer use your personal data for direct marketing purposes (right to object pursuant to Art. 21 (2) GDPR).
RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If the provisions of the GDPR are ever breached, data subjects have the right to lodge a complaint with a data protection supervisory authority, particularly in the member state of their habitual place of residence / work or the location of the alleged breach. Even after lodging a complaint, data subjects reserve the right to seek other forms of administrative or judicial remedy.
RIGHT TO DATA PORTABILITY
If we are processing your data by automated means on the basis of your consent or for the performance of a contract, you may ask for this data to be returned to you or transferred to a third party in a commonly used, machine-readable format. If you ask for your data to be transferred directly to another controller, we will only be able to honour your request if it is technically feasible.
SSL AND TLS ENCRYPTION
This site uses SSL and TLS encryption to ensure security and protect the transmission of sensitive data, such as any orders or enquiries that you send to the website operator. You can tell whether an encrypted connection has been established, because your browser’s address bar will have changed from “http://” to “https://” and a padlock symbol will be displayed in your browser bar.
If SSL or TLS encryption is enabled, third parties will not be able to intercept any data you send us.
ACCESS, BLOCKING, ERASURE AND RECTIFICATION
In accordance with the applicable legal provisions, you have the right to obtain free information on your stored personal data, as well as its source, recipients and the purpose of processing at any time; if applicable, you may also request the rectification, blocking or erasure of your data. If you have any questions about the information provided on this page or any other aspects of personal data, please contact us by referring to the details indicated in our legal notice.
RIGHT TO THE RESTRICTION OF PROCESSING
You have the right to request the restriction of the processing of your personal data. To do this, please contact us by referring to the details indicated in our legal notice. You may request the restriction of processing in the following cases:
If you dispute the accuracy of the personal data we hold on you, it will usually take some time for us to process your request. While we check the accuracy of your personal data, you may request the restriction of processing.
If the processing of your personal data is or has been unlawful, you may opt against the erasure of your data and request the restriction of processing instead.
If we no longer require your personal data but you need it for the establishment, exercise or defence of legal claims, you may opt against the erasure of your data and request the restriction of processing instead.
If you have objected to data processing in accordance with Art. 21 (1) GDPR, a balance must be struck between your legitimate interests and ours. If it is not yet clear whose interests prevail, you may request the restriction of the processing of your personal data.
If the processing of your personal data has been restricted, it may only be processed (with the exception of storage) with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of an important public interest of the European Union or a member state.
OBJECTION TO ADVERTISING EMAILS
The contact details published in accordance with our obligation to provide a legal notice must not be used for the purpose of sending unsolicited advertising and information. The operators of the sites expressly reserve the right to take legal action if they are sent unsolicited advertising, such as spam emails.
3. DATA COLLECTION ON OUR WEBSITE
SERVER LOG FILES
The website operator automatically will collect and store your information in so-called “server log files”, which your browser will automatically transmit to us. The following information will be collected and stored:
Browser type and version
Operating system
Referrer URL
Host name of accessing computer
Time of server request
IP address
Your data will not be merged with other data sources.
This data will be collected on the basis of point (f) of Art. 6 (1) GDPR. The website operator has a legitimate interest in the technically faultless presentation and optimisation of its website, and the server log files must be compiled for this purpose.
CONTACT FORM
If you send us an enquiry via the contact form, the information you provide – including your contact details – will be stored to enable us to process and respond to your enquiry. We will not share this data without your consent.
We will only ever process the data you enter in the contact form with your consent (point (a) of Art. 6 (1) GDPR). You may withdraw your consent at any time. You can do this by notifying us informally via email. If you withdraw your consent, however, this will not affect the lawfulness of any data processing performed up to that point in time.
We will retain your data entered in the contact form until you request its deletion, until you withdraw your consent to its storage, or until the purpose for which your data was collected no longer applies (e.g. once your enquiry has been fully processed). We reserve the right to comply with mandatory legal provisions, particularly retention periods.
ENQUIRIES BY EMAIL, PHONE OR FAX
If you contact us by email, phone or fax, we will save and process your enquiry, including any personal data contained therein (e.g. name), to deal with your request. We will not share this data without your consent.
This data will be processed on the basis of point (b) of Art. 6 (1) GDPR, provided your enquiry concerns the performance of a contract or pre-contractual measures. In all other cases, the processing will be based on your consent (point (a) of Art. 6 (1) GDPR) and/or our legitimate interest (point (f) of Art. 6 (1) GDPR), as we have a legitimate interest in effectively handling any enquiries addressed to us.
We will retain your data entered in the contact form until you request its deletion, until you withdraw your consent to its storage, or until the purpose for which your data was collected no longer applies (e.g. once your enquiry has been fully processed). We reserve the right to comply with mandatory legal provisions, particularly statutory retention periods.
DATA PROCESSING (CUSTOMER AND CONTRACT DATA)
We will only ever collect, process and use your personal data if this is necessary for the establishment, development or amendment of a legal relationship (master data). This will be done on the basis of point (b) of Art. 6 (1) GDPR, which allows data to be processed for the performance of a contract or pre-contractual measures. We will only ever collect, process and use your personal data regarding your use of our website (usage data) to the extent necessary to enable you to use the service or for billing purposes.
Your customer data will be deleted at the end of the order or business relationship. The statutory retention periods remain unaffected.
4. PLUG-INS AND TOOLS
GOOGLE FONTS
This website uses Google Fonts to ensure the uniform appearance of fonts. Whenever you open a page, your browser will load the required web fonts in your cache to correctly display texts and fonts.
For this purpose, your browser must connect to the Google servers. Google will then be informed that our website has been accessed from your IP address. We use Google Fonts in the interest of ensuring the uniform and appealing presentation of our website. This constitutes our “legitimate interest”, as defined in point (f) of Art. 6 (1) GDPR.
If your browser does not support web fonts, your computer will display the texts in a standard typeface.
You can find more information about Google Fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.
GOOGLE ANALYTICS
This website uses “Google Analytics”, a service provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA), to analyse how users interact with our website.This service uses cookies (i.e. text files stored on your device). The information collected by the cookies will usually be transferred to a Google server in the USA and stored there.
As IP anonymisation is used on this website, however, your IP address will be truncated within the member states of the European Union and the European Economic Area. This truncation will prevent your IP address from being linked to you personally. As part of our data processing agreement with Google Inc., this service provider will use the information collected to evaluate your use of the website and your website activities and to provide other services related to Internet usage.
You can prevent cookies from being stored on your device by changing your browser settings.If you disable cookies, however, we cannot ensure that you will be able to access all features of this website without restrictions.
In addition, you can prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. by installing and downloading a browser plug-in via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Here you can find more information on how your data will be used by Google Inc.: https://support.google.com/analytics/answer/6004245?hl=de.
GOOGLE MAPS
This website uses Google Maps via an API. This service is provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA).
Your IP address must be stored to enable the use of Google Maps. This information will usually be transferred to a Google server in the USA and stored there. We have no control over this data transfer.
We use Google Maps in the interest of creating a visually appealing website and making the places mentioned on our website easy to find. This constitutes our “legitimate interest”, as defined in point (f) of Art. 6 (1) GDPR.
More information on the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.