(Version 1.2, as at 06.08.2021)
Welcome to the data protection area of IPH Handelsimmobilien GmbH. Thank you for your interest in our company. The purpose of this data protection notice is to inform you in detail about when we collect data, what data we collect and how it is processed.
The controller pursuant to art. 4(7) General Data Protection Regulation (GDPR) is:
IPH Handelsimmobilien GmbH (legal notice)
Joachim Stumpf
Brienner Straße 45, 80333 München
Telefon: +49 89 55118-175
E-Mail: info@iph-gruppe.de
Our data protection officer can be contacted at:
Gesellschaft für Personaldienstleistungen mbH
Pestalozzistraße 27
34119 Kassel
Telefon: +49 561 78968-93
Fax: +49 561 78968-61
E-Mail: datenschutz@gfp24.de
The purpose of the following information is to provide you with a transparent explanation of how and to what extent we process personal data collected:
The legal basis for our use of data is constituted in particular by the requirements of the GDPR General Data Protection Regulation and also the supplemental provisions of the Federal Data Protection Act (new BDSG).
In cases in which we obtain your consent to the processing of personal data, the legal basis is art. 6(1)(a) GDPR.
When we process personal data which is necessary for the performance of a contract concluded between us, the legal basis is art. 6(1)(b) GDPR. This also applies to processing which is necessary in order to take pre-contractual steps.
Where it is necessary to process personal data in order to comply with a legal obligation to which we are subject, the legal basis is art. 6(1)(c) GDPR.
Where the processing of personal data is necessary in order to protect the vital interests of the data subject or another natural person, the legal basis is art. 6(1)(d) GDPR.
Where the processing of personal data is necessary for the purposes of the legitimate interests of our company or a third party, and your interests, fundamental rights and fundamental freedoms do not override that interest, the legal basis is art. 6(1)(f) GDPR.
If in the course of processing your personal data we transmit it to other parties or disclose it to them, we do so exclusively in reliance on one of the aforementioned legal bases. The recipients of this data may include, for example, payment service providers, for the purpose of performing a contract. Where we are required to do so by law or by court order, we must transmit your data to authorised authorities.
If external contractors assist us in processing your data (e.g. data analysis or circulating newsletters), this constitutes contractual processing under art. 28 GDPR. We conclude contracts for this purpose only with service providers which provide sufficient guarantees that they have taken suitable technical and organisational measures to ensure the protection of your data.
We transfer data to third countries (outside the European Union or the European Economic Area) only in accordance with legal requirements. If you give your express consent or it is contractually or legally necessary to transfer it, we process data, or have it processed, in third countries if they offer a recognised level of data protection, or pursuant to art. 44 ff. GDPR on the basis of specific guarantees, such as contractual obligations using the EU Commission's so-called Standard Contractual Clauses (see the EU Commission’s information page: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_en).
We shall delete or block your personal data as soon as the reason for storing it no longer applies. We store your personal data thereafter only if specific national or European statutory retention periods (in particular retention obligations under commercial or tax law) prevent its deletion.
Our data protection notice is based on terms which are used and defined in the GDPR. To ensure that our privacy policy is easy to read and understand, we would like to begin by explaining the most important terms.
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as a “data subject”). A natural person is considered to be identifiable if he or she can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Processing” is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use or disclosure by transmission, dissemination or otherwise making available, or alignment or combination, restriction, erasure or destruction.
The “controller” is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by European Union or Member State law, the controller or the specific criteria for identifying the controller may be provided for by European Union or Member State law.
“Pseudonymisation” is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
A “processor” is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
A “recipient” is a natural or legal person, public authority, agency or another body to which the personal data is disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with European Union or Member State law are not regarded as recipients.
A “third party” is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
“Consent” of the data subject is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
“Profiling” is any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
When your personal data is processed, as an individual data subject you have rights that you can exercise against us at any time. These are:
You have the right to be informed by us whether and – if so – which of your personal data we process, and to ask us for copies of your personal data. Please note that under certain circumstances your right of access may be restricted in accordance with the legal rules.
If the information concerning you is not, or is no longer, correct, you have the right to request the immediate rectification of the incorrect personal data concerning you and, if necessary, to have incomplete personal data completed.
You have the right, subject to the legal rules, to require that data concerning you be erased immediately, e.g. if the data is no longer required for the intended purposes and erasure is not prevented by statutory retention and storage requirements.
Under the requirements of art. 18 GDPR, you have the right to require us to restrict the processing of data concerning you; for example, if you have objected to processing, pending verification of whether your objection can be upheld.
You have the right to have data that you have provided us transmitted to yourself or to a third party in a commonly-used, machine-readable format. If you require that your data is transmitted directly to another controller, this will happen only if this is technically feasible.
If the processing of your personal data is based on consent given to us, you have the right to withdraw that consent at any time. Withdrawal will not affect the legality of processing carried out prior to the withdrawal.
You can send notice of withdrawal to IPH Handelsimmobilien GmbH, Brienner Strasse 45, 80333 Munich, info@iph-gruppe.de, fax: +49 89 55118-153. No particular form is required. We should mention that your objection can also be raised during the course of further proceedings or if necessary for technical reasons. You can find out more at the various addresses provided.
Subject to the conditions in art. 21(1) GDPR, you can object to the processing of data under art. 6 (1)(e) or (f) GDPR, for reasons relating to your particular situation. This also applies to profiling based on these provisions. If you exercise your right to object, we will no longer process the personal data in question unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.
You can send notice of objection to IPH Handelsimmobilien GmbH, Brienner Strasse 45, 80333 Munich, info@iph-gruppe.de, fax: +49 89 55118-153. No particular form is required. We should mention that your objection can also be raised during the course of further proceedings or if necessary for technical reasons. You can find out more at the various addresses provided.
Under art. 77 GDPR you have a right to complain to the supervisory authority if in your view your personal data has not been processed lawfully. The address of the competent supervisory authority for our company is:
Bavarian State Data Protection Supervision Office
Promenade 27 (Schloss)
91522 Ansbach
Telephone: 0981/53-1300
Fax: 0981/53-5300
E-Mail: poststelle@lda.bayern.de
Homepage: http://www.lda.bayern.de
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Below, we inform you when and in what context data is processed when you use our online services.
If you use our website exclusively for information purposes, in other words if you do not register or otherwise provide information to us, we collect only the personal data that your browser transfers to our server. When you view our website, we collect the data listed below. This is technically necessary in order to display our website and to ensure that it is presented stably and securely (the legal basis is art. 6(1)(f) GDPR, 1st sentence):
This data is stored temporarily in our system’s log files for a maximum of 14 days. It may be stored for longer, but in this case the IP addresses are partially deleted or disguised, so that they can no longer be matched to the client visiting the site.
In addition to the data mentioned above, cookies are saved on your device (e.g. PC, laptop or smartphone) when you use our website. Cookies are small text files that are saved on your hard disk, assigned to the browser that you are using, via which certain information is passed to the body setting the cookie (in this case, us). Cookies cannot execute programs or transfer viruses to your computer. Their purpose is to make our overall internet service more user-friendly and efficient.
This website uses the following types of cookie, whose scope and operation is explained below:
Session cookies are automatically deleted when you close your browser. These include session cookies in particular. They store a so-called session ID, which allow various requests from your browser to be attributed to a common session. This allows your computer to be recognised again when you return to our site. Session cookies are deleted when you log out or close your browser.
Category: statistics
Cookie name: _gat
Vendor: iph-gruppe.de
Type: http
Expiry: 1 day
Purpose: used by Google Analytics to restrict the demand rate.
Source: https://www.googletagmanager.com/gtm.js?id=GTM-W479DLN
Category: statistics
Cookie name: _gid
Vendor: iph-gruppe.de
Type: http
Expiry: 1 day
Purpose: registers a unique ID, which is used to generate statistical data on the visitor’s use of the website.
Source: https://www.googletagmanager.com/gtm.js?id=GTM-W479DLN
Category: statistics
Cookie name: GPS
Vendor: youtube.com
Type: http
Expiry: 1 day
Purpose: registers a unique ID on mobile devices to enable tracking based on geographic locations via GPS.
Source: https://www.youtube.com/embed/whc7lkky20q?enablejsapi=1height=415modestbranding=1rel=0showinfo=0width=657
Category: statistics
Cookie name: r/collect
Vendor: doubleclick.net
Type: pixel
Expiry: session
Purpose: used to send data on the visitor’s device and behaviour to Google Analytics. It monitors visitors via all devices and marketing channels.
Source: https://stats.g.doubleclick.net/r/collect?v=1aip=1t=dc_r=3tid=UA-2504330-2cid=1389421140.1597124955jid=1067690111_gid=1237466114.1597124955gjid=1831513131_v=j83z=1799752974
via https://www.googletagmanager.com/gtm.js?id=GTM-W479DLN
Category: statistics
Cookie name: test_cookie
Vendor: doubleclick.net
Type: http
Expiry: 1 day
Purpose: used to check whether the visitor’s browser supports the use of cookies.
Source: https://www.youtube.com/embed/whc7lkky20q?enablejsapi=1height=415modestbranding=1rel=0showinfo=0width=657
Category: statistics
Cookie name: YSC
Vendor: youtube.com
Type: http
Expiry: session
Purpose: registers a unique ID, which is used to analyse statistics on YouTube videos watched by the visitor.
Source: https://www.youtube.com/embed/whc7lkky20q?enablejsapi=1height=415modestbranding=1rel=0showinfo=0width=657
Category: statistics
Cookie name: yt-remote-cast-installed
Vendor: youtube.com
Type: html
Expiry: session
Purpose: stores the user settings when downloading YouTube videos integrated into other websites.
Source: https://www.youtube.com/embed/whc7lkky20q?enablejsapi=1height=415modestbranding=1rel=0showinfo=0width=657
Category: statistics
Cookie name: yt-remote-fast-check-period
Vendor: youtube.com
Type: html
Expiry: session
Purpose: stores the user settings when downloading YouTube videos integrated into other websites.
Source: https://www.youtube.com/embed/whc7lkky20q?enablejsapi=1height=415modestbranding=1rel=0showinfo=0width=657
Category: statistics
Cookie name: yt-remote-session-app
Vendor: youtube.com
Type: html
Expiry: session
Purpose: stores the user settings when downloading YouTube videos integrated into other websites.
Source: https://www.youtube.com/embed/whc7lkky20q?enablejsapi=1height=415modestbranding=1rel=0showinfo=0width=657
Category: statistics
Cookie name: yt-remote-session-name
Vendor: youtube.com
Type: html
Expiry: session
Purpose: stores the user settings when downloading YouTube videos integrated into other websites.
Source: https://www.youtube.com/embed/whc7lkky20q?enablejsapi=1height=415modestbranding=1rel=0showinfo=0width=657
Persistent cookies are automatically deleted after a specified duration, which may vary depending on the cookie. You can delete cookies at any time in your browser’s security settings.
Category: essential
Cookie name: django_language
Vendor: iph-gruppe.de
Type: http
Expiry: 1 year
Purpose: determines the preferred language of the visitor. It enables the website to establish the visitor’s preferred language upon revisiting the website.
Source: iph-gruppe.de
Category: statistics
Cookie name: _ga
Vendor: iph-gruppe.de
Type: http
Expiry: 2 years
Purpose: registers a unique ID, which is used to generate statistical data on the visitor’s use of the website.
Source: https://www.googletagmanager.com/gtm.js?id=GTM-W479DLN
Category: statistics
Cookie name: IDE
Vendor: doubleclick.net
Type: http
Expiry: 1 year
Purpose: used by Google DoubleClick to register and report the visitor’s actions on the website by viewing or clicking on the vendor’s advertisements, with the Purpose of measuring the effectiveness of the advertisement and targeted marketing for the visitor.
Source: https://www.youtube.com/embed/whc7lkky20q?enablejsapi=1height=415modestbranding=1rel=0showinfo=0width=657
Category: statistics
Cookie name: VISITOR_INFO1_LIVE
Vendor: youtube.com
Type: http
Expiry: 179 days
Purpose: attempts to estimate the visitors’ bandwidth on web pages with integrated YouTube videos.
Source: https://www.youtube.com/embed/whc7lkky20q?enablejsapi=1height=415modestbranding=1rel=0showinfo=0width=657
Category: statistics
Cookie name: yt-remote-connected-devices
Vendor: youtube.com
Type: html
Expiry: persistent
Purpose: stores the user settings when downloading YouTube videos integrated into other websites.
Source: https://www.youtube.com/embed/whc7lkky20q?enablejsapi=1height=415modestbranding=1rel=0showinfo=0width=657
Category: statistics
Cookie name: yt-remote-device-id
Vendor: youtube.com
Type: html
Expiry: persistent
Purpose: stores the user settings when downloading YouTube videos integrated into other websites.
Source: https://www.youtube.com/embed/whc7lkky20q?enablejsapi=1height=415modestbranding=1rel=0showinfo=0width=657
On our website we use cookies, which are generated by us as operator of the site and which are necessary to ensure that it functions fully and that our services are presented in full on the site. We use these cookies for the purposes of our legitimate interests pursuant to art. 6(1)(f) GDPR, to ensure the provision of our online services.
Beside the cookies set by us as controller, cookies offered by other providers are also used. We process these cookies on the basis of your consent under art. 6(1)(a) GDPR, or based on our legitimate interests under art. 6(1)(f) GDPR. You can find further information about our use of and collaboration with external contractors in the data protection information relating to our individual online services.
You can configure your browser’s settings as you wish and, for example, refuse to accept third party cookies or reject all cookies. However, we must point out that you may not be able to use all functions of this website if you do so. If you have consented to accepting cookies and wish to object to them in future, you can delete the stored cookies in the settings of the browser that you use.
Web browsers may be set to notify you when cookies are set, or to reject or disable some or all cookies. By disabling and deleting all cookies, you can also withdraw your earlier consent. If you disable or restrict cookies using your browser, you may not be able to use various functions on our website. You can use your web browser to delete stored cookies at any time, even automatically.
You can find out more about this option for the most commonly used browsers using the following links:
Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
Google Chrome: https://support.google.com/chrome/answer/95647?hl=en
Apple Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
Microsoft Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
Microsoft Edge: https://support.microsoft.com/en-gb/help/4027947/microsoft-edge-delete-cookies
Opera: https://help.opera.com/Linux/12.10/en/cookies.html.
If no restrictions have been placed on cookie settings, cookies which enable and ensure the necessary technical functions will remain on your device until the browser is closed; other cookies may remain on your device for longer.
Our website uses TLS encryption (formerly SSL) for security purposes and to protect sensitive content. Orders or contact requests that you send to us are thus encrypted when they are transmitted. Depending on the type of browser, you can recognise this from either the padlock symbol and/or the https protocol in the address line.
When you contact us using a contact form, the data communicated by you (your e-mail address, your name, your firm and your phone number) are stored by us so that we can answer your enquiry. The data entered in the contact form is processed on the basis of your consent pursuant to art. 6(1)(a) GDPR. If your contact request relates to the performance of a contract or taking pre-contractual steps, we process your data on the basis of art. 6(1)(b) GDPR. We delete the resulting data once it is no longer necessary to store it, or we restrict its processing if it is subject to legal retention obligations. You may withdraw this consent at any time. The legality of the data processing operations carried out up to the date of withdrawal is not affected by the withdrawal.
When you contact us by e-mail, telephone or fax, the personal data communicated by you (your e-mail address, your name, your firm and your phone number) are stored by us so that we can deal with your enquiry. We do not share this data without your consent.
The data is processed on the basis of art. 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary in order to take pre-contractual steps. In all other cases we process your data on the basis of your consent pursuant to art. 6(1)(a) GDPR and/or based on our legitimate interests under art. 6(1)(f) GDPR. Our legitimate interest lies in particular in the effective processing of your request.
We keep the data sent by you to us by way of contact requests until you request its erasure or revoke your consent to storing it, or until the purpose for which the data is stored no longer applies (e.g. after the processing of your request has been completed). This is without prejudice to mandatory statutory provisions, particularly legal retention periods.
If your personal data is processed for direct advertising purposes, under art. 21(2) GDPR you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it relates to such direct advertising. If you object, your personal data will then no longer be used for direct advertising purposes.
If you have concluded a contract with us, we will treat you as an existing client. Based on our legitimate interest in personalised direct advertising, we reserve the right to store your first name and surname, your postal contact details and – if we have received such further details from you in the course of our contractual relationship – your title, your academic degree and your professional or business title and a description of your sector, and to use them to send you interesting offers and information about our products by post. Existing client data is processed for our own or third-party advertising purposes pursuant to art. 6(1)(f) GDPR (legitimate interest).
You can object to the processing of data for the above purposes in future at any time and free of charge.
If you object, your data will be blocked from further processing for advertising. We should mention that, in exceptional cases, advertising material may still be sent for a short period even after we have received your objection. This is for technical reasons relating to the required lead time in the selection process, and does not mean that we have not acted on your objection.
With your consent, you can subscribe to our newsletter, in which we tell you about current interesting offers. We report regularly on company news, activities / fairs / events, studies, market data, surveys and new offers.
We use the so-called double-opt-in procedure for registration for our newsletter. This means that after you register we send an e-mail to your specified e-mail address, in which we ask you to confirm that you wish the newsletter to be sent to you. If you do not confirm your registration within 72 hours, your information will be blocked, and automatically erased. The purpose of the procedure is so that we can check your registration and investigate any possible misuse of your personal data.
The following is required information for you to be sent the newsletter: your e-mail address, your forename, your last name and also the firm for which you work. The provision of other data, which is marked specially, is voluntary. After you send your confirmation, we store your e-mail address and the other data for the purpose of sending you the newsletter. The legal basis for this is GDPR Art. 6 para. 1, 1st sentence point a.
You can withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. To withdraw your consent, click on the link provided in each newsletter e-mail.
We work with the following e-mail marketing contractor:
dialogue1 GmbH , Katharinenstraße 33, 20457 Hamburg, Germany
Privacy notice: https://dialogue1.com/datenschutz
We have concluded a processing contract with dialogue1. It places dialogue1 under an obligation to protect our clients’ data, and not to pass it to third parties.
We must inform you that we evaluate your user behaviour when the newsletter is sent out. For the purpose of this evaluation, the e-mails sent out include so-called web beacons or tracking pixels, made up of single-pixel image files which are stored on servers operated by dialog1 GmbH, Katharinenstrasse 33, 20457 Hamburg. For the purpose of the evaluations, we link the web beacons to your e-mail address and an individual ID.
We use the data thus obtained to create a user profile, in order to tailor the newsletter to your individual interests. We record when you read our newsletter and which links in the newsletter you click on, and from this we deduce your personal interests. We link this data to your interaction with our website.
You can object to this tracking at any time by clicking on the separate “unsubscribe” link provided in every e-mail. The information will be stored for as long as you remain subscribed to the newsletter. After a subscription is cancelled, we store the data anonymously, purely for statistical purposes.
We conduct surveys using Alchemer software, a tool supplied by Alchemer, 4888 Pearl East Circle, Boulder, Colorado 80301, USA. When taking a survey, the respondent’s IP address, information about devices and browsers used and the time and duration of the survey are transmitted to Alchemer together with the respondent’s information entered in the survey form. Participation is voluntary. The legal basis is your consent under art. 6(1)(a) GDPR. You can prevent the storage of cookies by setting your browser software accordingly.
Further information on the cookies used by Alchemer, data protection and duration of storage can be found at the following link https://www.alchemer.com/privacy/.
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on a user's computer and permit an analysis of the use of the site by the user. The information on your use of this website generated by the cookie is normally transferred to a server of Google in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be abridged by Google within European Union member states or other states which are party to the Treaty on the European Economic Area. Only in exceptional cases will the whole of your IP address be transferred to a Google server in the USA, where it will be abridged. Google will use this information on behalf of the operator of this website in order to evaluate your use of the website, to compile reports on activity on the website and to provide further services to the operator of this website in relation to the use of the website and the internet.
The IP address communicated by your browser for the purposes of Google Analytics will not be merged with other Google data.
This website uses Google Analytics with the extension “Anonymize IP”. This processes IP addresses in an abridged form, so that it is almost impossible to link them to individuals. If the data collected through you can be associated with you personally, this is therefore prevented immediately and the personal data immediately erased.
We use Google Analytics to analyse the use of our website and so that we can improve it regularly. The statistics obtained allow us to improve our service and to make it more interesting for you as a user. The legal basis for the use of Google Analytics is your consent under art. 6(1)(a) GDPR.
This website also uses Google Analytics for a cross-device analysis of visitor flows, performed by way of a user ID. You can deactivate the cross-device analysis of your usage in your customer account by clicking on “My Data” => “Personal Data”.
You can prevent the storage of cookies by adjusting the settings of your browser software; however, we should point out that in that case you may not be able to use all the features of this website in full. You can also prevent the collection of the data generated by the cookie relating to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Information on the third party supplier: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: https://www.google.com/analytics/terms/de.html, Übersicht zum Datenschutz: https://support.google.com/analytics/answer/6004245?hl=en sowie die Datenschutzerklärung: https://policies.google.com/privacy?hl=de&gl=de.
Our website uses tracking technologies provided by third parties. The purpose of the data processing is the analysis and management of consents given in order to discharge our obligations in terms of GDPR-compliant consent management.
The use of a consent management platform also serves the purpose of providing evidence of the consents given and not given and their management. Consents can be revoked at any time and such revocations will also apply to the future. The legal basis for the processing of personal data is art. 6 (1)(1)(c) GDPR (legal obligation).
For the purposes of storing the selected settings of our website visitors, we typically place cookies and pixels in the browser used. The storage takes place locally on the end device used by you (local storage).
Data processed:
The processing of personal data takes place within the European Union (EEA). If data is also processed in other countries, you will be informed separately.
Personal data is deleted as soon as it is no longer required for minuting purposes. Consent data must be kept for 6 years in accordance with §257 HGB (German Commercial Code). The certificate of revocation of consent previously given is kept for 3 years. The retention is based on the one hand on our accountability in accordance with art. 5 (2) GDPR, which obliges us to comply with the processing of personal data in accordance with the General Data Protection Regulation. On the other hand, the retention period under the regular statute of limitations according to §195 BGB (German Civil Code) is 3 years.
The consent management platform (data recipient) is:
Usercentrics GmbH
Sendlinger Strasse 7
80331 Munich
E-mail: datenschutz@usercentrics.com
Usercentrics data protection notice: https://usercentrics.com/de/datenschutzerklaerung/
This website uses the "Google Tag Manager", a service provided by Google Ireland Limited. Google Tag Manager offers the possibility to manage website tags via an interface. The Google Tag Manager tool which implements the tags is a cookie-free domain and does not itself collect any personal data. Google Tag Manager triggers other tags, which in turn may collect data under certain circumstances.
Google Tag Manager does not itself access this data. If a deactivation takes place at domain or cookie level, this remains in place for all tracking tags implemented via Google Tag Manager.
FAQ Google Tag Manager: https://www.google.com/intl/de/tagmanager/faq.html
Conditions of use Google Tag Manager: https://www.google.com/intl/de/tagmanager/use-policy.html
This website uses “Google Ads” (formerly Google AdWords), a service of Google Ireland Limited, Google Building, Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). Google Ads makes it possible, using advertising media on external websites, to draw attention to attractive services from websites already visited. This makes it possible to determine how successful individual promotions are. These advertising materials are delivered by Google using so-called “AdServers”. For this purpose, so-called AdServer cookies are used, which make it possible to measure specified parameters for evaluating success, such as the display of the ads or user clicks. If you access our website via a Google ad, Google Ads will store a cookie on your device. These cookies usually expire after 30 days. Cookies are not used to identify you personally. This cookie usually stores the following information as analytical values: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant to post-view conversions), and opt-out information (recording that the user no longer wishes to be targeted). These cookies allow Google to recognise your web browser. If a user accesses certain content, or pages on a Google Ads customer’s website, and the cookie stored on his computer has not expired, Google and the customer can recognise that the user has clicked on the ad and has been redirected to that page. Each Google Ads customer is assigned a different cookie. Thus cookies cannot be tracked through the Google Ads customer’s website. We do not ourselves collect or process any personal data as part of the above advertising activities. We receive only anonymous statistical evaluations from Google. We can identify the effectiveness of our advertising activities on the basis of these evaluations. We do not receive further data from the use of advertising media; in particular, we cannot identify users based on this information. Based on the marketing tools used, your browser automatically establishes a direct connection with Google’s servers. We have no influence over the extent of the data collected by Google’s use of Google Ads, or how else it is used. So far as we are aware, Google is informed that you have visited the part of our website in question, or clicked on an advertisement from us. If you have a Google user account and are registered, Google can associate the visit with your user account. Even if you are not registered with Google or are not logged in, it is possible that Google will find out your IP address, store it and process it for other purposes.
We use Google Ads for marketing and optimisation purposes, in particular so that we can provide you with relevant and interesting ads, improve campaign performance evaluations and calculate advertising costs fairly. The legal basis for this is the consent given by you under art. 6(1)(a) GDPR.
You can prevent cookies from functioning by deleting existing cookies and disabling the storage of new cookies in your web browser settings. We should point out that you may not be able to use all functions of our website if you do this. You can also prevent cookies from being stored by setting your web browser via https://www.google.de/settings/ads to block cookies from the https://www.googleadservices.com domain. We should point out that this setting will be deleted if you delete your cookies. You can also disable interest-related ads via the following link: https://optout.aboutads.info. We should point out that this setting will also be deleted if you delete your cookies in the web browser.
Information on the third party supplier: Google Ireland Limited, Google Building, Gordon House, Barrow St, Dublin 4, Ireland.
Further information on Google’s use of data, options for adjusting settings and raising objections and data protection can be found on the following Google websites:
Privacy policy: https://policies.google.com/privacy?hl=de&gl=de
Google Site Stats: https://services.google.com/sitestats/en.html
We use the GoToWebinar/GoToMeeting tool supplied by LogMeIn Ireland Limited, Bloodstone Building block C, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland to conduct conference calls, online meetings, video conferences and/or webinars (“online meetings”).
Various types of data are processed when using GoToWebinar/GoToMeeting. The scope of processing also depends on the information you provide before and during an online meeting.
The following personal data is processed:
User details: first name, last name, phone (optional), e-mail address, password (if single sign-on is not used), profile picture (optional), department (optional)
Meeting metadata: topic, description (optional), subscriber IP addresses, device/hardware information
For recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat.
When dialling in by telephone: record of incoming and outgoing numbers, country name, start and end time. If applicable, additional connection data such as the device’s IP address may be stored.
You may be able to use chat, question or survey functions in an online meeting. The text that you input is processed to display it in the online meeting and, if applicable, to record it. In order to allow video to be displayed and audio to be played, data from a microphone and any video camera in the device is processed during the meeting. You can turn off or mute the camera or microphone at any time using the GoToWebinar/GoToMeeting apps.
To attend an online meeting or enter the meeting room, you must provide at least your name.
We use GoToWebinar/GoToMeeting to conduct online meetings. If we want to record online meetings, we will inform you in advance and obtain your consent. The fact that the meeting is being recorded is also shown in the GoToWebinar/GoToMeeting app.
If necessary in order to minute the outcome of an online meeting, chat content may also be logged.
In the case of webinars, we may also process the questions asked by webinar participants for the purposes of webinar recording and follow-up.
If you are registered as a user with GoToWebinar/GoToMeeting, you can store reports of online meetings (meeting metadata, dial-up data, webinar questions and answers and webinar survey function) for up to one month at GoToWebinar/GoToMeeting.
The “attention monitoring” (“attention tracking”) software option in online meeting tools such as GoToWebinar/GoToMeeting is disabled.
Automated decision-making processes within the meaning of art. 22 GDPR are not used.
Where personal data of employees of IPH Handelsimmobilien GmbH is processed, the legal basis for processing is §26 Federal Data Protection Act (BDSG). If personal data used in connection with GoToWebinar/GoToMeeting is not necessary for the purpose of establishing, performing or terminating an employment relationship, but it is fundamental to the use of GoToWebinar/GoToMeeting, art. 6(1)(f) GDPR constitutes the legal basis for processing. In such cases, our interest lies in conducting online meetings effectively.
An additional legal basis for processing data when conducting online meetings is art. 6(1)(b) GDPR, insofar as the meetings are conducted in the context of contractual relations.
In principle, personal data processed in connection with participation in online meetings is not passed to third parties unless that is its very purpose.
The provider of GoToWebinar/GoToMeeting will necessarily be informed of the above data, insofar as this is provided for in our processing contract with GoToWebinar/GoToMeeting.
GoToMeeting is a service provided by LogMeIn Ireland Limited (Bloodstone Building block C, 70 Sir John Rogerson's Quay Dublin 2, Ireland), a subsidiary of LogMeIn Inc. (Log-MeIn, 320 Summer Street, Boston, MA 02210, USA).
Processing of personal data in a third country cannot therefore be ruled out. We have concluded a processing contract with the provider of GoToWebinar/GoToMeeting, which meets the requirements of art. 28 GDPR.
An appropriate level of data protection is guaranteed by adopting the so-called EU standard contractual clauses (https://www.logmeininc.com/de/trust/privacy).
For more information about LogMeIn's privacy policy, please visit https://www.logmeininc.com/legal/privacy.
We use TeamViewer software for technical support and training in connection with our products. We also offer online meetings and webinars via TeamViewer.
If you wish to use our services, you must download the TeamViewer software from the provider and run it on your computer. Use of the TeamViewer software is governed solely by the data protection conditions of TeamViewer GmbH, as contracting party. They can be accessed at https://www.teamviewer.com/de/datenschutzerklaerung/.
The legal basis for processing the data is the user’s consent pursuant to art. 6(1)(a) GDPR. If it is processed in connection with the performance of a contract or taking pre-contractual steps, we process your data on the basis of art. 6(1)(b) GDPR.
If personal data comes to our knowledge when TeamViewer is used, this is solely for the purpose of providing the service requested by you and not in order to process data on your behalf. If we use TeamViewer to process personal data on your behalf, we will ask you first to enter into a processing contract.
You can terminate a remote access session at any time by exiting the TeamViewer software. We do not store such data and we shall maintain its confidentiality.
Service provider information: TeamViewer Germany GmbH, Jahnstrasse 30, 73037 Göppingen. For details on data processing, please refer to TeamViewer’s privacy notice: https://www.teamviewer.com/de/datenschutzerklaerung/.
This website uses the Google Maps map service. This allows us to display interactive maps directly on the website and permits you to use the map function comfortably.
When you visit our website, Google is informed that you have accessed the corresponding sub-page on our website. In addition, metadata, which may be personal, is transmitted to the service provider. This is done regardless of whether Google provides a user account that you are logged in to, or whether there is no user account. If you are logged in to Google, your data will be associated directly with your account. If you do not want your data to be associated with your Google profile, you must log out before you press the button. Google stores your data as usage profiles and uses it for the purposes of advertising and market research and/or tailoring its website to requirements. It will be evaluated in this way in particular (even for users who are not logged in) in order to provide advertising which is tailored to requirements and to inform other users of its social network about your activities on our website. You have the right to object to the creation of these user profiles; you should preferably contact Google before exercising this right.
The function is only launched, and data is only transmitted to the service provider, when the service is activated. The legal basis for processing your data is art. 6(1)(a) GDPR (consent).
For more information on the purpose for which and the extent to which data is collected and processed by the plug-in vendor, please refer to the vendor’s privacy statements. You can also obtain more information there about your rights and configuration options in relation thereto, in order to protect your privacy: https://policies.google.com/privacy?hl=en&gl=en.
We have included YouTube videos on our website; they are saved at https://www.youtube.com/ and can be played directly from our website. They are all integrated using “advanced privacy mode”, meaning that no data about you as a user will be transferred to YouTube if you do not play the videos. According to YouTube, the data is transmitted only when you play the videos. We have no influence over this data transmission.
When you visit our website, YouTube is informed that you have accessed the corresponding sub-page on our website. In addition, metadata, which may be personal, is transmitted to the service provider. This happens irrespective of whether YouTube has a user account to which you are logged in, or whether there is no user account. If you are logged in to Google, your data will be directly associated with your account. If you do not want your data to be associated with your YouTube profile, you must log out before you launch the function. YouTube stores your data as a usage profile and uses it for the purposes of advertising and market research and/or tailoring its website to requirements. It is evaluated in this way in particular (even when the user is not logged in) in order to provide advertising which is tailored to requirements and in order to inform other users of the social network of your activities on our website. You have the right to object to the creation of these user profiles; you should preferably contact YouTube before exercising this right.
The function is only launched, and data is only transmitted to the service provider, when the service is activated. The legal basis for processing your data is art. 6(1)(a) GDPR (consent). Your consent to future use can be revoked at any time.
Information on the third party supplier: Google Ireland Limited, Google Building, Gordon House, Barrow St, Dublin 4, Ireland.
For more information about privacy, please visit the following Google website: https://policies.google.com/privacy?hl=en
We maintain publicly accessible profiles on social networks to promote our services and products. We would like to connect with you there, as a visitor to and user of those pages and our website.
User data relating thereto may be processed outside the European Union area. This may pose risks for you as a user, and may make it difficult to enforce your rights. When selecting the social media platforms that we use, we ensure that the operators undertake to comply with EU data protection standards.
If you visit one of our social media sites (e.g. Facebook), we, IPH Handelsimmobilien GmbH, Brienner Strasse 45, 80333 Munich, are jointly responsible with the operator of the social media platform in question within the meaning of the GDPR and other data protection provisions.
We have no influence over the processing of personal data by the various platform operators. For example, social networks like Facebook use your data for market research and advertising purposes. Amongst other things, user behaviour can be analysed and a usage profile can be created from the user’s interests revealed by this analysis. Social media operators use cookies to store and further process this information. These are text files that are stored on the user’s various devices. If you have a profile on the social media platform in question and are logged in to it, this storage and analysis can even take place across devices. This allows you to see interest-related ads inside and outside of your social media accounts. Data processing may also affect persons who are not registered as users on the social media platform in question.
We can access various categories of statistical data via social media platforms. These statistics are generated and provided by the social media operator. As the operator of the fan page, we have no influence over how they are generated and presented. We use this data, which is available to us in a consolidated form (total number of page views, information on “likes”, page activity, post interactions, reach, video views, post reach, comments, shared content, replies, proportion of men and women, origin by country and city, language and telephone number clicks), to make our posts and activities on our fan page more attractive to users. The availability and processing of data is changing as social media platforms constantly develop, so you are referred to the platforms’ privacy statements for further details.
The operation of these fan pages, including the processing of users’ personal data, takes place on the basis of our legitimate interest in making up-to-date and supportive information and interaction possible for and with our users and visitors, pursuant to art. 6(1)(f) GDPR. In some circumstances you may also grant a platform operator consent to process your data, in which case the legal basis is art. 6(1)(a) GDPR.
For a comprehensive description of how data is processed and the scope for objecting (opt-out) in each case, please see the privacy statements and details of the platform operator in question.
The data collected directly by us via social media websites will be deleted from our systems as soon as the purpose for which it is stored ceases to apply, or if you request us to erase it or you withdraw your consent to storing it. Stored cookies remain on your device until you delete them. This is without prejudice to mandatory statutory provisions, particularly legal retention periods.
We have no influence over how long your data is stored by social network providers for their own purposes. You can obtain more information directly from the social network operator (e.g. in their privacy statement: see below).
In principle, you can assert your rights (access, correction, erasure, restriction of processing, data portability and right to raise a complaint) both against us and against the operator of the portal in question (e.g. Facebook).
Notwithstanding our shared responsibility, we must point out that we do not have full access to your personal data. For this reason, you should contact the providers of the social media platforms directly for access requests and in order to assert your rights as a data subject. Only the providers have access to user data and can take direct action and provide information. If you need help with this, please contact us: IPH Handelsimmobilien GmbH, Brienner Strasse 45, 80333 Munich, info@iph-gruppe.de, fax: +49 89 55118-153.
Provider: LinkedIn Ireland Unlimited Company, Wilton place, Dublin 2, Ireland
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Provider: XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany
Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
Right to object (opt-out): https://privacy.xing.com/de/datenschutzerklaerung
You can apply to us by e-mail or post or using an online application form. Below, we inform you about when we collect personal data, what personal data we collect and how it is processed during the application process.
In order for us to be able to consider you in the recruitment process for a particular position, we require the normal informative application documents, by which you inform us about your personality profile and your qualifications.
Personal data provided by you and transmitted to us in the course of your application generally includes:
Covering letter and CV with the usual personal details (first and last name, date of birth, address, telephone number, e-mail address) as well as evidence and certificates.
As a general rule, we use your application documents only to decide on an appointment to the position for which you have expressly applied. We process the personal data provided to us only if this is necessary for the purpose of deciding whether to establish an employment relationship with us. The legal basis is art. 6(1)(b) GDPR, art. 88 GDPR in conjunction with §26 para. 1, 1st sentence Federal Data Protection Act (new BDSG), insofar as it concerns information that we receive from you in the course of the application process (name, contact details, date of birth, information on your professional qualifications and school education or information on continuing vocational training). If you provide us voluntarily with additional information, we will process it on the basis of your consent in accordance with art. 6(1)(a) GDPR. In the course of the application process, further personal data may be collected for this purpose from you personally and from generally accessible sources. Your personal data will be passed within our company exclusively to persons who are involved in the processing of your application.
If we process personal data about you in order to defend your legal claims against us in relation to the application process, this is done in reliance on the legal basis in art. 6 (1)(f) GDPR. Our legitimate interest lies, for example, in our duty to provide evidence in proceedings under the General Equality Act [Allgemeines Gleichbehandlungsgesetz] (AGG).
If you submit an unsolicited application that does not relate to any specific position, we will use your application documents for recruitment decisions for all posts falling for consideration. We will make the applicant data available for consultation to selected decision makers in our group so that they can find out about your personality profile and qualifications. The legal basis for data processing in this case is also art. 6(1)(b) GDPR in conjunction with art. 28 GDPR and §26 para. 1 new BDSG.
Our group includes the following companies:
IPH Handelsimmobilien GmbH, IPH Centermanagement GmbH, IPH Transact GmbH (see also Legal Notice).
Your personal data will be transmitted to third parties exclusively for the purposes listed below. We will pass your personal data received as part of the application process to third parties only if:
Pursuant to art. 28 GDPR, your data will also be passed to technical contractors who use it exclusively on our behalf, and under no circumstances for their own business purposes. These are IT service providers, hosting providers or providers of applicant management systems.
It is not intended that your data will be transferred to third countries outside the EU or the European Economic Area.
If we are unable to make you a job offer or you refuse a job offer, withdraw your application, withdraw your consent to data processing or ask us to erase the data, the data that you have provided, including any remaining physical application documents, will be stored or kept for a maximum of 3 months after the conclusion of the application procedure (retention period), in order to be able to review the details of the application process in the event of disagreements (art. 6(1)(f) GDPR).
Should you be hired as the result of an application process, we will use your application documents pursuant to art. 6(1)(b) GDPR §26 para. 1 new BDSG for inclusion in your personal data file for the purpose of establishing the employment relationship and the personal profile described by you and the qualifications to which you referred, on the basis of which you were recruited.
There is no legal requirement to provide your personal data in the initial phase of employment. However, personal data has to be provided in order to conclude an employment relationship with us. This means that we cannot and will not be able to enter into an employment relationship with you unless you provide us with personal data when applying.
No automated decisions within the meaning of art. 22 GDPR are taken in individual cases. This means that we evaluate your application personally, and the decision on your application is not based solely on automated processing.
The following information shows you how we handle your data when you contact us, when contract negotiations are conducted with us and/or when contractual agreements exist with us.
Data is processed in order to bring about transactions and services in the performance of our contracts with our clients or to take pre-contractual steps, at your request. Processing your data is necessary within the meaning of art. 6(1)(b) GDPR in order to initiate and perform contracts.
Processing your personal data may also be necessary in order to protect our legitimate interests within the meaning of art. 6 (1)(f) GDPR. Our legitimate interests consist of taking steps to manage our business and further develop our services and products, ensuring IT security and the company’s IT operations and to assert legal rights.
We process the following categories of data:
Master and contact details: title, name (first and last name), department and function in the company, address, other contact and communication data (telephone, e-mail address, mobile phone number, fax, etc.), contract data, billing data, receivables data, statistical data.
The data in the above categories has been transmitted directly to us by clients, interested parties and collaboration partners.
We do not disclose your personal data to third parties. This does not apply to our contractors required in order to perform the contract such as parcel and letter delivery companies, banks for the collection of direct debits, financial authorities and service for the purposes of client management, strategic positioning and communication, market research, support/servicing of ICT applications, data deletion and website management and content marketing.
The data stored in relation to you is erased when the contract has been performed, unless this is contrary to any other legal retention obligations. This includes any commercial law or financial law data. It will be erased in accordance with legal requirements after ten years, unless any longer retention periods are prescribed or necessary for legitimate reasons. If you withdraw your consent to the use of your data, it will be erased immediately unless this is inconsistent with the above reasons.
You have a right to object to processing. You can object to the future use of your data at any time.
The provision of personal data is required by contract or necessary in order to conclude a contract. Failure to provide the required personal information would result in us not being able to enter into a business relationship with you.