Privacy Statement

§ 1 Information on the collection of personal data

(1) We inform you below about the collection of personal data when using our website. Personal data means all data relating to you personally, such as your name, address, e-mail addresses and user behaviour.
    
(2) The controller within the meaning of Art. 4 para.7 of the EU General Data Protection Regulation (GDPR) is Joachim Stumpf, IPH Handelsimmobilien GmbH, Brienner Strasse 45, 80333 Munich (see Legal Notice).

You can contact our responsible data protection officers, Gesellschaft für Personaldienstleistungen mbH, at datenschutz@gfp24.de or by post at Pestalozzistrasse 27, 34119 Kassel.

(3) When you contact us by e-mail or using a contact form, the data communicated by you (your name, your firm, your e-mail address, your telephone number and your reason for contacting us) are stored by us so that we can answer your questions. We delete the resulting data once it is no longer necessary to store it, or we restrict its processing if it is subject to legal retention obligations.

(4) If we use contractors instructed by us for the purpose of individual aspects of our services, or if we wish to use your data for advertising purposes, we shall inform you in detail below about the procedures which will apply. We shall also inform you of the criteria used to determine how long your data is stored.

§2 Your rights

(1) You have the following rights against us in respect of the personal data relating to you:

Right of access,
Right of rectification or erasure,
Right to restrict processing,
Right to object to processing,
Right to data portability.

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

§3 Collection of personal data when you visit our website

(1) If you use our website solely for information purposes, in other words if you do not register or otherwise provide information to us, we collect only the personal data that your browser transfers to our server. If you wish to view our website, we collect the following data, which is technically necessary for us in order to display our website to you and to ensure its stability and security (the legal basis for this is GDPR Art. 6 para. 1, 1st sentence point f):

IP address
Date and time of visit
Time difference from Greenwich Mean Time (GMT)
Content of your request (precise page)
Access status / HTTP status code.
Quantity of data transferred in each case
Website from which the request comes
browser
Operating system and its interface
Language and version of the browser software.

(2) In addition to the above-mentioned data, cookies are saved on your computer when you visit our website. Cookies are small text files that are saved on your hard disk, assigned to the browser that you are using, via which certain information is passed to the body setting the cookie (in this case, us). Cookies cannot execute programs or transfer viruses to your computer. Their purpose is to make our overall internet service more user-friendly and efficient.

(3) Use of cookies:

a) This website uses the following types of cookie, whose scope and operation is explained below:

Transient cookies (see b)
Category: statistics
Cookie name: _gat
Vendor: iph-online.de
Type: http
Expiry: session
Purpose: used by Google Analytics to restrict the demand rate
Source: https://www.google-analytics.com/analytics.js

Category: statistics
Cookie name: _gid
Vendor: iph-online.de
Type: http
Expiry: session
Purpose: registers a unique ID, which is used to generate static data on the visitor’s use of the website.
Source: https://www.google-analytics.com/analytics.js

Category: marketing
Cookie name: collect
Vendor: google-analytics.com
Type: pixel
Expiry: session
Purpose: used by Google Analytics to send information about the user’s device and behaviour.
Source: https://www.google-analytics.com/collect

Category: preferences
Cookie name: I18N_LANGUAGE
Vendor: iph-online.de
Type: http
Expiry: session
Purpose: used by Plone CMS to store the user’s language and to deliver content in the user’s language.
Source: https://www.iph-online.de/de/@@languagecookie

Persistent Cookies (see c).
Category: statistics
Cookie name: _ga
Vendor: iph-online.de
Type: http
Expiry: 2 years
Purpose: registers a unique ID, which is used to generate static data on the visitor’s use of the website.
Source: https://www.google-analytics.com/analytics.js

b) Transient cookies are automatically deleted when you close your browser. These include session cookies in particular. They store a so-called session ID, which allow various requests from your browser to be attributed to a common session. This allows your computer to be recognised again when you return to our site. Session cookies are deleted when you log out or close your browser.

c) Persistent cookies are automatically deleted after a specified duration, which may vary depending on the cookie. You can delete cookies at any time in your browser’s security settings.

d) You can configure your browser’s settings as you wish and, for example, refuse to accept third party cookies or reject all cookies. We must point out that you may not be able to use all functions of this website if you do this.

e) We use cookies so that we can identify you if you visit us again and you have an account with us. Otherwise, you would need to log in again for each visit.

f) Flash cookies are captured not by your browser but by your Flash plug-in. We continue to use HTML5 storage objects, which are stored on your device. These objects store the necessary data regardless of the browser that you use and have no automatic expiry date. If you do not wish Flash cookies to be processed, you must install an appropriate add-on, e.g. “Better Privacy” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by switching your browser to private mode. We also recommend that you manually delete your cookies and browser history on a regular basis.

§4 Newsletter

(1) With your consent, you can subscribe to our newsletter, in which we tell you about our latest news. The type of information that you can receive in the newsletters is set out on the Newsletter Registration page www.iph-online.de/de/news/newsletter.

(2) We use the so-called double-opt-in procedure for registration for our newsletter. This means that after you register we send an e-mail to your specified e-mail address, in which we ask you to confirm that you wish the newsletter to be sent to you. If you do not confirm your registration within 24 hours, your information will be blocked, and automatically erased after one month.

(3) The following is required information for you to be sent the newsletter: your e-mail address, your title, your forename, your last name and also the firm for which you work. The provision of other data, which is marked specially, is voluntary. After you send your confirmation, we store your e-mail address and the other data for the purpose of sending you the newsletter. The legal basis for this is GDPR Art. 6 para. 1, 1st sentence point a.

(4) You can withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. To withdraw your consent, click on the link provided in each newsletter e-mail, send an e-mail to newsletter@bbe.de or send a message using the contact details set out in the Legal Notice.

(5) We must inform you that we evaluate your user behaviour when the newsletter is sent out. For the purpose of this evaluation, the e-mails sent out include so-called web beacons or tracking pixels, made up of single-pixel image files which are stored on servers operated by dialog1 GmbH, Katharinenstrasse 33, 20457 Hamburg. For the purpose of the evaluations, we link the web beacons to your e-mail address and an individual ID. Links in the newsletter also contain this ID.

(6) We use the data thus obtained to create a user profile, in order to tailor the newsletter to your individual interests. We record when you read our newsletter and which links in the newsletter you click on, and from this we deduce your personal interests. You can object to this tracking at any time by informing us by e-mail at newsletter@bbe.de. The information will be stored for as long as you remain subscribed to the newsletter. After a subscription is cancelled, we store the data anonymously, purely for statistical purposes.

(8) Circulation of online surveys
Our data processing contractor for the online surveys is SurveyGizmo. You will find information about our contractor’s data protection here, amongst other places:
https://www.surveygizmo.com/privacy , https://www.surveygizmo.com/privacy/gdpr, https://www.surveygizmo.com/resources/blog/gdpr-commitment

The responsible bodies for SurveyGizmo are:

Information Commissioner’s Office: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, (telephone:  0303 123 1113 (local rate) or 01625 545 745 (national rate), Online: https://ico.org.uk/concerns)

Security and Compliance Manager: 4888 Pearl East Circle, Suite 100 W, Boulder, Colorado, 80301 (telephone: 800 609 6480, Email: compliance@surveygizmo.com)
EU Representative: DP-Dock GmbH, Ballindamm 39, 20095 Hamburg, Germany (telephone: +49 (0) 40 99999 3430, E-mail: surveygizmo@gdpr-rep.com)

§5 Use of Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5F5, Ireland (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on a user's computer and permit an analysis of the use of the site by the user. The information on your use of this website generated by the cookie is normally transferred to a server of Google’s parent company, Google LLC, whose registered office is at 1600 Amphitheatre Parkway, Mountain View, California, USA, and stored there. However, if IP anonymisation is activated on this website, your IP address will be stored within European Union member states or other states which are party to the Treaty on the European Economic Area. Only in exceptional cases will the whole of your IP address be transferred to a Google server in the USA, where it will be abridged. Google will use this information on behalf of the operator of this website in order to evaluate your use of the website, to compile reports on activity on the website and to provide further services to the operator of this website in relation to the use of the website and the internet.

(2) The IP address communicated by your browser for the purposes of Google Analytics will not be merged with other Google data.

(3) You can prevent the storage of cookies by adjusting the settings of your browser software; however, we should point out that in that case you may not be able to use all the features of this website in full. You can also prevent the collection of the data generated by the cookie relating to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available via the following link.: https://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension “_anonymizeIp()”. The effect of this is that IP addresses are abridged for further processing; this prevents them from being associated with individuals. If the data collected through you can be associated with you personally, this is therefore prevented immediately and the personal data immediately erased.

(5) We use Google Analytics to analyse the use of our website and so that we can improve it regularly. The statistics obtained allow us to improve our service and to make it more interesting for you as a user. For those exceptional cases in which personal data is transferred to the USA, Google has undertaken to abide by the EU-US Privacy Shield – see https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is GDPR Art 6 para 1, 1st sentence, point f.

(6) Information on the provider: Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Terms of use: https://www.google.com/analytics/terms/de.html; data protection overview: https://support.google.com/analytics/answer/6004245?hl=de; privacy notice: https://policies.google.com/privacy?hl=de&gl=de.

(7) This website also uses Google Analytics for a cross-device analysis of visitor flows, performed by way of a user ID. You can deactivate the cross-device analysis of your usage in your customer account by clicking on “My Data” => “Personal Data”.

(8) More information and Google's applicable data protection provisions can be accessed at https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail via this link https://www.google.com/intl/de_de/analytics/.

§6 Integration of Google Maps

(1) This website uses the Google Maps map service, via an API (Application Programming Interface). The vendor is Google Ireland Limited, Google Building, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. This allows us to display interactive maps directly on the website and permits you to use the map function comfortably.

(2) When you visit our website, Google receives the information that you have called up the corresponding sub-page on our website. In addition, the data referred to in §3 of this notice is transmitted. This is done regardless of whether Google provides a user account that you are logged in to, or whether there is no user account. If you are logged in to Google, your data will be directly associated with your account. If you do not want your data to be associated with your Google profile, you must log out before you press the button. Google stores your data as usage profiles and uses it for the purposes of advertising and market research and/or tailoring its website to requirements. It will be evaluated in this way in particular (even for users who are not logged in) in order to provide advertising which is tailored to requirements and to inform other users of its social network about your activities on our website. You have a right to object to the creation of these user profiles; you must contact Google in order to exercise this right.

(3) For more information on the purpose for which and the extent to which data is collected and processed by the plug-in vendor, please refer to the vendor’s privacy statements. You can also obtain more information there about your rights and configuration options in relation thereto, in order to protect your privacy: https://policies.google.com/privacy?hl=de&gl=de. Google also processes your personal data in the USA and Google has undertaken to abide by the EU-US Privacy Shield – see  https://www.privacyshield.gov/EU-US-Framework.

(4) Google Maps is used in the interests of making the presentation of our online service more appealing, and to make it easy to find the locations referred to by us on the website. This constitutes a legitimate interest within the meaning of GDPR Art. 6 para. 1f.

§7 Deployment and use of Google Web Fonts

(1) In order to present fonts uniformly, this website uses so-called Web Fonts, provided by Google. When a page is accessed, your browser loads the required web fonts in order to display texts and fonts correctly. The vendor is Google Ireland Limited, Google Building, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland.

(2) For this purpose, the browser that you are using must contact Google’s servers. Google thereby learns that our website has been accessed from your IP address. Google Web Fonts are used in the interests of a uniform and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of GDPR Art. 6 para. 1f. If your browser does not support Web Fonts, your computer will use a default font.

(3) For more information about Google Web Fonts, see https://developers.google.com/fonts/faq and Google's privacy notice: Https://www.google.com/policies/privacy/.

§8 Deployment and use of Google reCAPTCHA

(1) This website uses the reCAPTCHA service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, to determine whether certain inputs have been carried out by people or computers. reCAPTCHA is used in the “Contact Form” field. Google recognises the type of input based on the terminal’s IP address, the web page with the reCAPTCHA function which is being accessed, the date of the visit and the data from the browser and operating system used. Mouse movements in the reCAPTCHA areas are also analysed. If you are logged in to your Google account, this data is also used for identification.

(2) The legal basis for processing personal data for this purpose is GDPR Art. 6 para. 1f. There is a legitimate interest on our part to ensure the safety of our website and to protect ourselves from automated entries and attacks.