Privacy notice for customers and other external individuals
Information regarding processing of personal data of customers, potential customers, suppliers and other external individuals in accordance with Articles 12, 13, 21 GDPR
We take the protection of your personal data very seriously. We process your data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the Bundesdatenschutzgesetz (BDSG) [Federal Data Protection Act]. Below, we inform you about the processing of your data in accordance with Articles 12, 13, 21 GDPR.
Who is responsible for data processing? (Art. 13 clause 1 a, b GDPR)
The entity responsible for data processing is:
AENGEVELT Immobilien GmbH & Co. KG
Kennedydamm 55, 40476 Düsseldorf
Phone no.: +49 (0) 211 – 8391 - 0
E-mail: kontakt@aengevelt.com
You can address questions concerning data protection to:
AENGEVELT Immobilien GmbH & Co. KG
To the Data Protection Officer
Kennedydamm 55, 40476 Düsseldorf
Phone no.: +49 (0) 211 – 8391 - 276
E-mail: Datenschutz@aengevelt.com
For which purposes and on which legal bases do we process your personal data? (Art. 13 clause 1 c, d, and 2 f GDPR)
We only process any data which we collected from you as part of the business transaction in question, e.g. preparing an offer, conclusion and execution of contracts, billing, in regard to general enquiries, for procurement purposes. Legal basis is Art. 6 GDPR. The purposes of processing depend on your enquiry or on the business transaction in question.
Depending on the type of business transaction or your enquiry, we will store your data in our communications and business systems to the necessary extent subject to exclusive use for that purpose and in accordance with market practice.
Only if we were granted corresponding consent by you (in accordance with Art. 6 clause 1a) we will process your data for purposes like information about and advice regarding products and services as well as for marketing and customer satisfaction analysis purposes and for disclosure to third parties.
Where required, we process your data for the protection of the justified interests of us or third parties in accordance with Art. 6 clause 1 f GDPR, for example for assertion of legal claims and defence in litigation or for ensuring IT operations and security.
In order to comply with legal requirements, me may or must, where necessary, process your data and disclose them to third parties (in accordance with Art. 6 clause 1c).
We will not use your data in any form for automated decision-making or profiling.
Who receives your personal data? (Art. 13 clause 1 e, f GDPR)
In general, we do not disclose personal data to third parties, unless you have granted your consent to doing so, unless is a corresponding legal provision applies or unless we have a justified interest. We especially have a justified interest when we exchange data between group companies within the group or jointly process data within the group. If we outsource parts of data processing to third parties by way of contract processing, we conclude corresponding contract processing agreements with these suppliers in accordance with Art. 28 GDPR.
We will process your data exclusively in Germany and have no intention of processing the data abroad.
For how long do we store the data? (Art. 13 clause 2 a GDPR)
The legislator has established a wealth of retention obligations and retention periods.
In general, we will only store your data for as long as legally required (e.g. 10 years for business records). Ihre Daten werden nicht weiter von google erfasstAfter lapse of the retention periods, the data in question are routinely deleted in accordance with data protection law, for example if they are no longer required for contract fulfilment. We store data that we process based on your consent until consent is revoked or for as long as the data are needed. We store data that we process based on a justified interest for as long as the justified interest applies.
Commercial or financial data of a completed business year are deleted after another ten years, in compliance with legal provisions, provided that no longer retention periods are stipulated or required for justified reasons. Where data are not subject to specific retention periods, they are deleted once the purposes for which they are processed no longer apply.
What are your rights and obligations? (Art. 13 clause 2 b, c, d, e GDPR)
Each data subject has the following rights:
in accordance with Art. 15 GDPR the right to information
in accordance with Art. 16 GDPR the right to correction
in accordance with Art. 17 GDPR the right to deletion
in accordance with Art. 18 GDPR the right to limitation of processing
in accordance with Art. 20 GDPR the right to data transferability
in accordance with Art. 13 GDPR the right to file a complaint with the supervisory authority in charge
in accordance with Art. 7 clause 3 GDPR the right to revocation of any consent granted at any time with effect for the future
Additionally, you have a right of objection, which we will explain in more detail at the end of this privacy notice.
If you would like to exercise your rights, please contact the Data Protection Officer (see above for contact details) in writing (by post or e-mail).
Supervisory authority in charge
Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen
Street address: Kavalleriestr. 2 – 4, 40312 Düsseldorf
Postal address: PO Box 20 04 44, 40102 Düsseldorf
Phone no.: +49 (0) 211/38424-0
E-mail address: poststelle@ldi.nrw.de
You only have to provide us with those personal data that are required for the communication with you or for the compliance with contractual obligations or which we are legally obliged to collect (e.g. financial law, tax law). Otherwise, we cannot communicate with you and cannot or must not conclude and execute a contract with you.
If you have further questions regarding data protection, please contact our Data Protection Officer under the contact details set out above.
Information on your right of objection in terms of Art. 21 General Data Protection Regulation (GDPR)
You have the right, based on reasons stemming from the situation particular to you, to object at any time to the processing of personal data relating to you subject to Article 6 clause 1 letter f GDPR (data processing based on balancing of interests); this also applies to any profiling in terms of Article 4 no. 4 GDPR that is based on this provision.
If you lodge an objection, we will no longer process your personal data, unless we can prove mandatory reasons worthy of protection for processing that supersede your interests, rights, and freedoms or if processing serves the purpose of asserting, exercising or defending legal claims.
In individual cases, we will process your personal data in order to provide direct advertising. You have the right to object at any time to any processing of your personal data for such advertisement; this also applies to profiling, insofar as it is related to such direct advertisement.
Where you object to processing for direct advertisement purposes, we will no longer process your personal data for such purposes.
Objections can be filed without formal requirements and should, where possible, be addressed to the entities specified in the sections “Data Controller” or “Data Protection Officer” of the Privacy Notice.