Privacy Statement for the Website
Privacy Statement
General Introduction:
We take the protection of your personal data very seriously and want to ensure your safety when you visit our Internet page. We handle data protection, in particular, in compliance with the provisions of the European General Data Protection Regulation, the Federal Data Protection Act (BSDG - new) and the Federal Telecommunications and Telemedia Data Protection Act (Telekommunikation-Telemedien-Datenschutz-Gesetz = TTDSG). We would herewith like to inform you of the nature, scope and purpose of the processing of your personal data. To begin with, we would like to point out that this Privacy Statement solely refers to our own webpages and does not apply to any third-party webpages to which we may refer in the form of a link.
Object of protection:
The object of this Privacy Statement is to protect personal data. This concerns all information that refers to an identified or identifiable natural person (hereinafter referred to as the “data subject”) This includes, in particular, all information that allows conclusions to be drawn as to your identity (e.g., details such as your name, postal address, email address and telephone number).
Technical requirements:
In order for you to be able to set up a connection to our website, your browser transfers specific data to the web server of our website. This is a technical requirement that allows the information you called up to be made available to you by our website. This is achieved by storing your IP address, the date and time of your request, your operating system type and other information which is then stored and used for a maximum period of 7 days. We reserve the right to store these data for a limited period in order to safeguard our legitimate interests so as to be able to derive information from personal data in the case of unauthorized access or the attempt to deliberately cause damage to our company through this route (Art. 6, para. 1 (f) GDPR). These data shall be solely stored or transferred for this and no other purpose, whereby we shall not inform you of this or ask for your consent in advance.
Cookies:
Cookies are small text files that are stored by your browser on your computer or mobile terminal device to detect, for example, whether you visit the same webpages repeatedly from the same terminal device or browser. In general, we set cookies to analyze the interest in our website as well as to improve the user-friendliness of our website. In principle, however, you can also call up our website without using cookies.
As a rule, cookies can be deactivated or removed with the aid of special tools which are offered by most commercial browsers. For each browser that you use, you have to determine the settings separately and configure these individually. The different browsers offer a range of functions and options to this purpose.
For full and easy usage of our website, you should accept those cookies that allow the use of specific functions, resp. make it easier to use. You can review which cookies are used by us and to which purpose - and how long these are stored - in the following overview:
Cookie list:
Cookie types:
In order to be able to explain the most common cookie types in more detail, we have provided explanations of these in the following to help you to understand them:
1. Session cookies:
The usage of session cookies allows users and the changes they make on a particular website to be identified. These cookies allow the website to track the movements of the users across individual pages so that information that has already been entered/stored does not have to be re-entered/stored again. Webshop shopping baskets are a good example of this. The session cookie stores the selected products in the shopping basket so that this contains the correct articles when payment is made at checkout. Session cookies are deleted when the user logs off or become invalid once the session has automatically expired.
2. Permanent or protocol cookies:
A permanent or protocol cookie stores the user’s information and settings on the user’s computer for the duration of the period defined by the respective expiration date. This allows quicker and easier access as you do not, for example, have to repeat the language settings or re-enter your login data. These cookies are automatically deleted when the storage period expires.
3. Third-party cookies:
As a rule, third-party cookies have no influence on the usage of the page as they do not originate from the operator of the website. They fulfill, for example, the purpose of collecting information for advertising purposes, personalized content and web statistics and for passing these on to the respective third-party provider.
4. Tracking cookies:
Tracking cookies are special text files which open up the possibility of collecting data on the behavior of the Internet user. This is aimed at gaining information on what the user’s main points of interest are, for example, to be able to launch made-to-measure promotional offers.
The examples of the most common types of cookies in the above representation is intended to provide you with a global overview of this type of data collection. The information contained therein does not claim to be complete. As a result of technical developments in the IT sector, it is to be assumed that further cookie types will be developed over the course of time. Prior to using our website, please refer at regular intervals to the Privacy Statement on our website to find out about the latest changes.
Consent Manager:
Our website uses the Cookiebot service (Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, hereinafter referred to as “Cookiebot”) which manages the consents for all the services on our website that require consent (a so-called Consent Management service). The use of Cookiebot allows us to comply with our legal obligation to provide proof that consent has been granted (Art. 7, para. 1 GDPR). In this connection, the following data are collected from you and stored by Usercentrics:
- Date and time of access
- Browser information
- Device information
- Geographical location
- Cookie preference
- URL of the website visited
Cookiebot operates on our behalf within the scope of a commissioned data processing agreement pursuant to Art. 28 GDPR and does not process the data for its own purposes. Full details on Cookiebot’s Privacy Policy can be found at
https://www.cookiebot.com/en/privacy-policy/.
Processing takes place according to Art. 6, para. 1 (c) GDPR in order to comply with the legal requirements.
How to contact us
You will find various contact forms on our website that can be used to contact us electronically. Alternatively, you can also place a callback request using another contact form. It is also possible to contact us via the email address provided. If you contact us via any one of these channels, we will process the personal data you entered and transmitted to us.
In the event that a contact form is used, the personal data processed consists of the master data entered in this form (last name, first name, salutation, email address) and, possibly, any further personal data that you entered in the “Message” field. If you contact us directly via email, we will record your email address and any personal data resulting from the text of your email.
If you use the contact form to place a callback request, we will also record the personal data that you provided via the input screen. This includes your name, telephone number and, if you additionally opt to provide this information, the company for which you work, as well as the subject of your callback request. To ensure that your data are transferred securely, we use a connection which deploys state of the art encryption with an SSL certificate.
Processing takes place based on our legitimate interests according to Art. 6, para. 1 (f) GDPR or on your having provided your consent in accordance with Art. 6, para. 1 (a) GDPR. You can revoke this consent at any time with future effect. To do so, please send us your revocation in an email addressed to datenschutz@aengevelt.com.
Newsletters / reports and market reports
Our website provides you with the opportunity to access a range of reports and market reports which we are happy to provide as downloads. In order to access this information, you need to first sign up for our newsletter service which will then notify you whenever we upload a current City Report to our website. For this purpose, we will send you a form asking for your email address and name. Registration for our newsletters is completed using a double opt-in procedure. This is a recognized procedure in which an email with a confirmation link is sent to the email address you provided. The regular delivery of the information mentioned above will not start until you have activated this link.
This processing only takes place based on your having provided your consent in accordance with Art. 6, para. 1 (a) GDPR. You can revoke this consent at any time with future effect. To do so, please feel free to send us your revocation in an email addressed to datenschutz@aengevelt.com or click on the "unsubscribe" link in the newsletter.
Google Maps:
Our website uses the Google Maps map service via an API (application programming interface). The provider of this map service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In order to be able to use the Google Maps functions, your IP address needs to be saved. According to Google, this information is generally transferred to and stored on a server in Ireland. However, it cannot be ruled out that the parent company in the USA can also access these data. As the operator of this website, we have no influence on the respective transfer of these data. The information is not transmitted until you click the respective button on the map. Upon activating the map, you automatically consent to the processing of your personal data in accordance with Art. 6, para. 1 (a) GDPR.
A transfer of your data to the USA harbors certain risks, e.g., national authorities may gain access to your data through domestic laws (such as “FISA”). The ability to enforce your rights as a data subject in accordance with Art. 15 ff. GDPR may also be restricted as a result. When transferring data to the USA, Google uses so-called standard protection clauses (according to Art. 46, para. 2 GDPR) to provide appropriate safeguards with regard to protecting your data against the risks mentioned above.
If you do not wish to consent to the transfer of this information, please do not click on the button in the map. This allows you to continue to use our website without a transfer taking place. You may also revoke your consent at any time by refreshing or reloading our website.
More information on the handling of user data can be found in Google’s Privacy Statement: https://policies.google.com/privacy?hl=en&gl=en
Tracking tools (exports to third countries):
Our website makes use of functions provided by a range of different third-party web analysis services, such as Google. In the following, we shall explain in even more detail which individual services are involved and which data are analyzed.
Third country exports (risks):
Please note that when analyzed by such services (e.g., Google), your data may also potentially be transferred to a third country, such as the USA. The third country transfer of your data to countries such as the USA, where there is no GDPR-compliant or appropriate level of data protection, harbors certain risks which we would like to inform you about at this stage. National laws, such as the United States Foreign Intelligence Surveillance Act (FISA), may permit domestic authorities (in the USA) to access information available to a provider on your person without your knowledge or consent if the authority believes there is an occasion to do so. In addition, you may be restricted in enforcing your rights as a data subject according to Art. 15 ff. GDPR.
We only deploy services that use standard protection clauses (in accordance with Art. 46, para. 2 GDPR) as appropriate safeguards for ensuring secure exports to third countries.
Use of Google Tag Manager
We use Google Tag Manager, a service provided by Google Inc., 1600 Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”. Google Tag Manager can manage a broad range of different website tags used by marketers via one single interface. The tool (Tag Manager which implements the tags) is a cookie-free domain which does not collect any personal data. This solely activates tags that may, in turn, possibly collect data (please refer to the descriptions provided below on Google Analytics). However, Google Tag Manager does not actually access these data. If a deactivation takes place at domain or cookie level, this remains unchanged for all tracking tags implemented using Google Tag Manager.
Implementation of Google Analytics using the anonymization function
On our website, we implement Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA - hereinafter referred to as “Google”. Google Analytics uses cookies which allow your usage of our website to be analyzed. As a rule, the information created by these cookies on the usage of our online offer (e.g., when, where and how often you access our website, incl. your IP address) is transferred to and stored on a Google server in Ireland or the USA. You can find out more about the ensuing risks in our Privacy Statement further up in this document.
In order to eliminate the possibility of linking your IP address to your person, it is immediately shortened after its collection (e.g., through the deletion of the last 8 bits), thus rendering it anonymous.
Further information on the processing of personal data by Google can be found at
https://policies.google.com/privacy?hl=en&gl=en.
Your consent to the processing of your data in accordance with. Art. 6, para. 1 (a) GDPR is provided via our Consent Manager (cookie banner). You can revoke this consent at any time with future effect (please see below).
If you wish to revoke your consent to the use of Google Analytics, please click on this link to prevent analysis data from being transferred to Google Analytics:
Use of GA Audiences
On this website, data are collected and stored through GA Audiences, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA: “Google”). From these data, usage profiles can be created using pseudonyms. Through this technology, users who have already visited our web pages and online services see targeted advertising from us on other external sites within the Google Partner Network. To achieve this, a cookie is set on your computer which is used to analyze user behavior when visiting the website and which can then be used for targeted product recommendations and interest-based advertising purposes.
Further information on the processing of personal data by Google can be found at
https://policies.google.com/privacy?hl=en&gl=en.
The processing of personal data takes place based on the consent you previously provided via our Consent Manager in accordance with Art. 6, para.1 (a) GDPR. You can revoke this consent at any time with future effect. To do so, please click on the following link:
Use of DoubleClick by Google
DoubleClick by Google is a service offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). DoubleClick by Google uses cookies to present advertisements that are relevant to your person. This is achieved by allocating a pseudonymous identification number (ID) to your browser to check which advertisements were displayed in your browser and which advertisements were called up. The use of DoubleClick cookies allows Google and their partner websites to introduce specific advertisements based on previous visits to our or other Internet websites. The information generated by these cookies is transmitted by Google to a server in the USA where it is stored and used for evaluation purposes. You can find out more about the risks which may arise as a result in our Privacy Statement further up in this document.
Further information on the processing of personal data by Google can be found at
https://policies.google.com/privacy?hl=en&gl=en.
The processing of personal data takes place based on the consent you previously provided via our Consent Manager in accordance with Art. 6, para. 1 (a) GDPR. You can revoke this consent at any time with future effect. To do so, please click on the following link:
Use of the LinkedIn Pixel
Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Every time one of our pages that contains a LinkedIn function is called up, a connection to the LinkedIn servers is made. LinkedIn is informed that you have visited our website using your IP address. If you click on LinkedIn’s “Recommend button” whilst logged into your LinkedIn account, it is also possible for LinkedIn to associate your visit to our website with your person and your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or their usage by LinkedIn.
More information on this topic can be found in LinkedIn’s Privacy Statement at:
https://www.linkedin.com/legal/privacy-policy.
The processing of personal data takes place based on the consent you previously provided via our Consent Manager in accordance with Art. 6, para. 1 (a) GDPR. You can revoke this consent at any time with future effect. To do so, please click on the following link:
Use of the Facebook Pixel and Facebook Custom Audiences:
On our website, we use the so-called “Facebook Pixel” provided by the Facebook social network which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as “Facebook”).
Using the Facebook Pixel allows us to determine so-called “Custom Audiences”, i.e., personalized target groups, to which you are then assigned during the tracking process by way of this pixel. The Facebook advertising placed by us is then only displayed to those individuals who have been assigned to the target group in question. This is aimed at ensuring that you only see advertising for products and services in which you are actually interested. The purpose of this is to ensure that our advertising corresponds to the potential interests of the users and does not have a harassing effect on them. During data transmission, the Facebook Pixel also passes on personal data directly to Facebook. You can discover exactly which data are involved in this process and for what other purposes Facebook processes these data via Facebook's Privacy Policy which can be found at
https://www.facebook.com/policy.php.
The processing and forwarding of the personal data of visitors to our website is carried out on the basis of Art. 6, para. 1 (a) GDPR based on the consent you provided voluntarily via our Consent Manager (cookie banner). You can revoke this consent at any time with future effect. To do so, please click on the following link:
Use of AddThis:
We use a website plugin from AddThis (Oracle America, Inc., 500 Oracle Parkway, Redwood Shores, CA 94065, USA) on our website. Via this plugin, content from our website can be shared quickly and easily on various social media channels, such as Facebook, Twitter and Instagram, resp. via email. If you are logged in to a social media channel using an own account which you use to share content when visiting this website, this process (and other related information, such as your visit to our website, etc.) may be linked to your account. AddThis also collects various information pertaining to your visitor behavior via cookies. The following data may be processed as a result:
Cookie IDs, website URLs, time when you visited the website, time spent on the website, IP addresses, mobile advertising IDs, browser and device information.
The information collected might also be shared with other companies. For more information, please refer to
https://www.oracle.com/legal/privacy/addthis-privacy-policy.html.
The processing of personal data takes place based on the consent you previously provided via our Consent Manager in accordance with Art. 6, para. 1 (a) GDPR. You can revoke this consent at any time with future effect. To do so, please click on the following link:
Further general information:
Changes to this Privacy Statement
We check this Privacy Statement on a regular basis to ensure that it complies with the legal provisions, the jurisprudence and the statements of the supervisory authorities, as well as to align it to emerging trends and the technological state of the art. In this respect, we reserve the right to change this Privacy Statement in order to adjust it in line with new legal data protection requirements or other changes in the factual or legal circumstances. We kindly ask, therefore, that you always check the information in our Privacy Statement applicable at the time prior to using our website.
Who is responsible for data processing? (Art. 13, para. 1 (a), (b) GDPR)
Responsible for data processing on our website is Aengevelt Immobilien GmbH & Co. KG (“Aengevelt”). Please refer to our Imprint for contact details: https://www.aengevelt.com/en/imprint/
Our Data Protection Officer can be reached at:
Aengevelt Immobilien GmbH & Co. KG
Attn: Data Protection Officer
Kennedydamm 55 / Ross-Str. 166
40476 Düsseldorf, Germany
Tel. +49 211 8391-0
Fax +49 211 8391-255
datenschutz@aengevelt.com
Who receives your personal data? (Art. 13, para. 1 (e), (f) GDPR)
We treat your personal data confidentially and never pass these on to third parties unless you have provided us with your consent to do so, where these are made available based on a legal or contractual commitment or where their forwarding is necessary in order to complete pre-contractual measures, resp. fulfill a contract. In individual cases, we may contract a processor (e.g., IT service provider) to process your personal data. This is then carried out in accordance with Art. 28 GDPR and on the basis of a respective commissioned data processing contract.
How long is the data stored? (Art. 13, para. 2 (a) GDPR)
The legislator has imposed numerous retention periods and deadlines.
We only store your data as long as this is legally required.
Once these periods have lapsed, we delete the respective data as a matter of routine, in as far as they are no longer required with a view to fulfilling the contract. We store data that are processed based on your consent until this consent is revoked, resp. as long as these data are required. We store data that are processed based on a legitimate interest as long as this legitimate interest continues to exist.
In line with the legal provisions, commercial law data or financially-relevant data ensuing from a closed financial year are deleted after a further ten years have passed, in as far as no longer retention periods have been stipulated or are required for legitimate reasons. In as far as the data are not subject to specific retention periods, they are deleted when the purpose for which they were processed ceases to exist.
For which purposes and on which legal basis do we process your personal data? (Art. 13, para. 1 (c), (d) GDPR)
We have already outlined the purposes and legal basis for processing data. In addition, the following generally applies: Where required, we process your data to safeguard our legitimate interests or those of other third parties in accordance with Art. 6, para. 1 (f) GDPR, for example, to establish legal claims or to defend ourselves in legal disputes or to uphold our IT operations or security.
We process your data for purposes of external communications and marketing on the basis of Art. 6, para. 1 (a) or (f) GDPR in cases where we have a legitimate interest in doing so, or where we have received your written consent to process your personal data. You have the right to revoke your consent at any time.
In order to be able to comply with legal obligations, we are allowed to, or must, where required, process your data and pass these on to third parties (in accordance with Art. 6, para. 1 (c)).
In no case shall we use your data in an automated decision-making process or for profiling purposes.
Furthermore, we use cookies to be able to offer you an improved service when using our website and to make this website more convenient for you to use (Art. 6, para. 1 (f) GDPR).
Which rights and obligations do you have? (Art. 13, para. 2 (b), (c), (d), (e) GDPR)
All data subjects have the following rights:
- In accordance with Art. 15 GDPR, you have the right to receive information. This means that you can request confirmation from us as to whether your personal data are being processed by ourselves.
- In accordance with Art. 16 GDPR, you have the right to rectification. This means that you can demand that we rectify any incorrect personal data concerning your person.
- In accordance with Art. 17 GDPR, you have the right to erasure (“right to be forgotten”). This means that you can demand that we erase any personal data concerning your person without undue delay - unless we are unable to erase your data, for example, due to being required to observe legal retention periods.
- In accordance with Art. 18 GDPR, you have the right to restriction of processing. This means that we are virtually no longer allowed to process your personal data - apart from storing them.
- In accordance with Art. 20, GDPR, you have the right to data portability. This means that you have the right to receive the personal data concerning your person and that you have made available to us in a structured, commonly used and machine-readable format and to transmit these data to another controller.
- In accordance with Art. 7, para. 3 GDPR, you have the right to revoke any consent you have provided at any time with future effect.
- In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the responsible supervisory authority.
In addition, you also have the right to object which we will be explaining in more detail at the end of this data protection information sheet.
If you would like to exercise any of your above rights, please contact our Data Protection Officer (see contact details listed above).
Responsible supervisory authority
State Data Protection Officer
North Rhine-Westphalia
Office address: Kavalleriestr. 2–4, 40312 Düsseldorf, Germany
Postal address: P.O. Box 200444, 40102 Dusseldorf, Germany
Tel.: +49 (0)211 38424-0
Email address: poststelle@ldi.nrw.de
Information on your right to object in accordance with Art. 21 General Data Protection Regulation (GDPR)
You have the right to object, on grounds resulting from your particular situation, at any time to the processing of personal data concerning your person which is carried out based on Art. 6, para. 1 (f) GDPR (data processing based on the weighing up of legitimate interests); this also applies to potential profiling based on this provision as provided for in Art. 4 (4) GDPR.
Should you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms or where this processing is for the establishment, exercise or defense of legal claims.
Please direct your objection in writing (via email or post) to the attention of our Data Protection Officer (see contact details listed above).