Privacy Notice for visiting our website

How we use your data and what your rights are – Information in accordance with Article 13, 14, and 21 of the General Data Protection Regulation (GDPR)

This Privacy Notice applies to the collection, processing, and use of your personal data when visiting our website www.aengevelt.com.

Below, we would like to inform you about the type of data we collect, process, and use and for which purposes we do so as well as which rights you are entitled to in this context.

I. General information

1. Data Controller

The Data Controller for your personal data is:

Aengevelt Immobilien GmbH & Co. KG (hereinafter referred to as “we” or “Aengevelt”), Kennedydamm 55 / Ross-Str. 166, 40476 Düsseldorf, Germany, Phone +49 211 8391-0, Fax +49 211 8391-255, e-mail: kontaktaengevelt.com

2. Data Protection Officer:

You can contact our Data Protection Officer using the following contact details:

Aengevelt Immobilien GmbH & Co. KG, Data Protection Officer, Kennedydamm 55 / Ross-Str. 166, 40476 Düsseldorf, Tel. +49 211 8391-0, Fax +49 211 8391-255, datenschutzaengevelt.com

3. Which data from which sources do we process?

We process personal data that you provide us with on a voluntary basis or which are collected when using our website.

Please see section II – Processing of personal data for more information.

4. For which purpose do we process your personal data and what are the legal bases for processing?

We process your personal data in accordance with the pertinent data protection regulations for various purposes. In general, the following purposes of processing are conceivable: Processing for compliance with contractual obligations (Art. 6 clause 1 letter b GDPR), to protect justified interests (Art. 6 clause 1 letter f GDPR), based on your consent (Art. 6 clause 1 letter a GDPR) and/or based on legal obligations (Art. 6 clause 1 letter c GDPR).

Please see section II – Processing of personal data for more information.

5. Who receives my data?

Any service providers (so-called contract processors, see Art. 4 no. 8 GDPR) contracted and commissioned by us may receive personal data. We use the following contract processors or categories of contract processors:

· IT service providers

· Google Inc.

We do not disclose your data to third parties who process data subject to their own responsibility (so-called data controllers, see Art. 4 no. 7 GDPR).

6. Storage of data

We only process your personal data for as long as is required for the respective purpose of processing.

Beyond that, we are subject to various retention and documentation obligations, resulting, amongst others, from the Handelsgesetzbuch (HGB) [German Commercial Code], the Abgabenordnung (AO) [Tax Code], and the Makler- und Bauträgerverordnung (MaBV) [Estate Agent and Property Developer Regulation]. These periods may be up to 10 years.

Finally, the storage period also depends on the statutory statute of limitations, which may, for example, amount to up to thirty years in terms of sections 195 et seqq. Bürgerliches Gesetzbuch (BGB) [German Civil Code], with the regular limitation period being three years.

7. Your rights

Each data subject has the right to information under Art. 15 GDPR, the right to correction under Art. 16 GDPR, the right to deletion under Art. 17 GDPR, the right to limitation of processing under Art. 18 GDPR as well as the right to data transferability under Art. 20 GDPR. In order to exercise the above rights, you can contact the entities set out in clause one of Section I – General information.

Furthermore, you may lodge a complaint with a data protection authority (Art. 77 GDPR). The supervisory authority in charge regarding Aengevelt is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)

Additionally, you have a right to objection which is specified in further detail at the end of this privacy notice.

II. Processing of personal data

1. Cookies

For the purpose of structuring your visit on our websites in an attractive manner and for enabling you to use certain functions, we make use of what is referred to as “cookies” on certain websites. These cookies are small text files which will be stored on your end device. The cookies can be transmitted to these when accessing a website and thus allow for identification of the user. Cookies help to make the use of websites easier for users. Some of these cookies will be deleted again at the end of the respective browser session, i.e. after you closed the browser window (this type of cookies is referred to as “session cookies”). Other cookies remain on your end device and enable us to recognise your browser whenever you visit our websites again (also referred to as “persistent cookies“).

You have the possibility to change your browser settings so that you will be informed in the case any cookies are set and you may individually decide whether or not to accept any cookies or generally exclude any cookies to be saved. You can delete cookies that were already placed. In the case where you opt for rejecting any cookies, the functionalities on our website may be restricted.

Processing of personal data following the use of cookies is based on Article 6 clause 1 letter f GDPR. The purpose of data processing and our justified interest is the increased functionality of our website.

2. Automatic collection of access data / server logfiles

Whenever you visit our website, the following set of data will be stored automatically for each access on an individual basis:

* name of the retrieved file,

* date and time of the call-off,

* transferred amount of data,

* notification of whether or not the call-off was successful; and

* description of the type of the web browser used.

The personal data in logfiles are processed based on Article 6 clause 1 letter f GDPR. The purpose of processing and our justified interest are easier administration of our website and the opportunity to recognise and track hacking.

3. Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics makes use of what is referred to as “cookies”, small text files which are saved on your computer and which allow for any analysis of the manner in which you use our website. As a general rule, any information as to the use of this website generated by such cookies is transferred to a server based in the United States where it will be stored.

If IP anonymisation is activated on this website, Google is going to shorten your IP address within a member State of the European Union or any other contracting state of the European Economic Area prior to transferring it to the United States. Only in exceptional cases Google will transfer the entire IP address to a server based in the United States and shorten the address there. IP anonymisation is activated on this website.

On behalf of the website operator, Google will use this information for evaluating the use of the website by you, to prepare website activities reports and to provide any additional services for the website operator in relation to the use of both the website and the internet in general. Any IP addresses transferred through browsers within the framework of Google Analytics will not be combined with any other data collected by Google.

You have the right to object to cookies being saved on your computer by changing the respective browser software settings; however, we would like to point out that this may result in certain functions of this website being restricted so that you cannot use them to the full extent. In addition to the above, you also have the right to prevent any data generated by the cookies and relating to the use of the website (including your IP address) from being transferred to Google and you may prevent these data from being processed by Google by downloading and installing the browser plug-in which is http://tools.google.com/dlpage/gaoptout?hl=de available at the following address.

You can prevent recording by Google Analytics on our website by clicking on the following link. An opt-out cookie is placed which prevents the future collection of your data when visiting this website:

You can prevent recording by Google Analytics on our website by clicking on the link.

For further information on the general terms and conditions of use and on data protection, please visit http://www.google.com/analytics/terms/de.html or www.google.com/intl/de/analytics/privacyoverview.html.

We base the processing of personal data by Google Analytics on Article 6 clause 1 letter f GDPR. The purpose of data processing and our justified interest is the analysis of use of our website.

4. Google Maps

This website uses the Google product Google Maps. By visiting a subpage that contains Google Maps, Google receives the information that you have accessed the corresponding subpage on our website. Additionally, data are collected which your browser transmits to Google. This includes, for example, IP address, date and time of the request, the amount of data transferred each time, operating system and its interface, language and version of the browser software.

This takes place irrespective of whether Google provides a user account via which you are logged in or whether you do not have a user account. If you are logged into Google, your data are directly linked to your account. If you do not wish for a link to your profile with Google, you have to log out before clicking the button. Google saves your data as user profiles and utilises them for advertisement or market research purposes and/or tailored design of its website. In order to exercise any rights, such as a right of objection to the creation of these user profiles, you have to contact Google.

By using Google Maps, you agree to the Google Maps terms and conditions. You can find the Google Maps terms and conditions here: Terms and conditions of Google Maps. For further information regarding the processing of your personal data by Google Inc., please see the Google Privacy Notice; it can be found here: Privacy Notice of Google. Google also processes your personal data in the USA and has committed to the EU-US Privacy Shield.

5. Contact

You can find various contact forms on our website, which you may use for contacting us electronically. Alternatively, you can request us to call you back using a separate contact form. Alternatively, you can use the e-mail address provided for contacting us. If you use one of these channels to contact us, we will process the personal data you enter and transmit to us.

In case of using a contact form, the personal data that are processed consist of the core data entered there (surname, first name, title, e-mail address) and any additional personal data you may have entered in the field “message”. If you contact us directly using e-mail, we record your e-mail address as well as any personal data that may be disclosed in the text of the e-mail.

If you use the contact form to request us to call you back, we will also collect the data you have entered into and transmitted via the entry mask. This includes name, phone number and if applicable – should you decide to provide this information additionally – the company you work for and the topic of your callback request. Processing takes place pursuant to Article 6 clause 1 letter f GDPR. Purpose of data processing and our justified interest are customer care and the ability to reply to messages addressed to us.

6. Enquiries regarding estate agent services

Via various other contact forms, you have the opportunity to request us to act as estate agent (https://www.aengevelt.com/en/immobilien.html). For this purpose, there are separate forms each for Purchase, Sale, Leasing, and Letting.

If you use the contact form to request estate agent services, we collect all information concerning the object of such services and your core data that were entered into the respective fields. These consist of surname, first name, title, e-mail address as well as, if applicable – should you decide to provide this information additionally – address and phone number.

Additionally, there are separate contact forms for each exposé. Again, you core data and all personal data that are contained in the field “Your message” will be collected. Additionally, we will link your request to the corresponding exposé.

We process the transmitted personal data based on Article 6 clause 1 letter b GDPR. The sole purpose of processing are the actual processing of your request, contacting you, and provision of our real estate services for you.

7. Registration and downloading market reports

Our website offers you the option to create a user profile (https://www.aengevelt.com/en/login.html). Registration is required for the provision of content, especially the download of market reports.

As part of the registration, we collect the following personal data in the entry mask: Name, address, e-mail address and, if applicable – should you decide to provide this information additionally – title, fax and phone number as well as the company you work for. If you download content from our website, we will process the information as to which content you download.

We process the transmitted personal data based on Article 6 clause 1 letter f GDPR. The purpose and our justified interest are the analysis of the use of our website, especially demand for our real estate data.

8. Sending of marketing information

If you create a user profile, you are given the option to receive further information based on the market reports you downloaded. These will provide you with information regarding the market relevant for you as well as with information regarding our scope of services.

We process the following personal data in this respect: Name, address, e-mail address and, if applicable – should you decide to provide this information additionally upon registration – title, fax and phone number, the company you work for as well as the content you downloaded from our website. Based on your downloads, we will send you information tailored to your interests. Please see the declaration of consent for more information regarding recording of downloads and personalisation of advertisement.

We process the personal data based on Article 6 clause 1 a GDPR. The purposes are customer retention and direct advertising.

9. Data rooms

We use data rooms in which we offer our customers and interested parties various project-based documents for downloading. These include, for example, property documents or contractual documents. Only users activated for the project will be given access.

As part of access control, we process the following personal data in this respect: e-mail address, name.

Processing of personal data is based on Article 6 clause 1 letter f GDPR. The purpose and our legitimate interest are the initiation of contracts, provision of project-relevant documents, and the prevention of unauthorised access to the uploaded documents.

Information on your right of objection in terms of Art. 21 General Data Protection Regulation (GDPR)

You have the right, based on reasons stemming from the situation particular to you, to object at any time to the processing of personal data relating to you subject to Article 6 clause 1 letter f GDPR (data processing based on balancing of interests); this also applies to any profiling in terms of Article 4 no. 4 GDPR that is based on this provision.

If you lodge an objection, we will no longer process your personal data, unless we can prove mandatory reasons worthy of protection for processing that supersede your interests, rights, and freedoms or if processing serves the purpose of asserting, exercising or defending legal claims.

In individual cases, we will process your personal data in order to provide direct advertising. You have the right to object at any time to any processing of your personal data for such advertisement; this also applies to profiling, insofar as it is related to such direct advertisement.

Where you object to processing for direct advertisement purposes, we will no longer process your personal data for such purposes.

Objections can be filed without formal requirements and should, where possible, be addressed to the entities specified in the sections “Data Controller” or “Data Protection Officer” of the Privacy Notice.

The most recent revision of this Privacy Notice took place in May 2018.

Privacy Statement

General Introduction:

We take the protection of your personal data very seriously and want to ensure your safety when you visit our Internet page. We handle data protection, in particular, in compliance with the provisions of the European General Data Protection Regulation, the Federal Data Protection Act (BSDG - new) and the German Telemedia Act (TMG). We would herewith like to inform you of the nature, scope and purpose of the processing of your personal data. To begin with, we would like to point out that this Privacy Statement solely refers to our own webpages and does not apply to any third-party webpage to which we may refer in the form of a link.

Object of protection:

The object of this Privacy Statement is to protect personal data. This includes all information that refers to an identified or identifiable natural person (hereinafter referred to as the “data subject”). This includes, in particular, all information that allows conclusions to be drawn as to your identity (e.g. details such as your name, postal address, email address and telephone number).

Technical requirements:

In order for you to be able to set up a connection to our website, your browser transfers specific data to the webserver of our website. This is a technical requirement that allows the information you called up to be made available to you by our website. This is achieved by storing your IP address, the date and time of your request, your operating system type and other information which is then stored and used for a maximum period of 7 days. We reserve the right to store these data for a limited period in order to safeguard our legitimate interests so as to be able to derive information from personal data in the case of unauthorized access or the attempt to deliberately cause damage to our company through this route (Art. 6, para. 1 (f) GDPR). These data shall be solely stored or transferred for this and no other purpose, whereby we shall not inform you of this or ask for your consent in advance.

Cookies:

Cookies are small text files that are stored by your browser on your computer or mobile terminal device to detect, for example, whether you visit the same webpages repeatedly from the same terminal device or browser. In general, we set cookies to analyze the interest in our website as well as to improve the user-friendliness of our website. In principle, however, you can also call up our website without using cookies.

As a rule, cookies can be deactivated or removed with the aid of special tools which are offered by most commercial browsers. For each browser that you use, you have to determine the settings separately and configure these individually. The different browsers offer a range of functions and options to this purpose.

For full and easy usage of our website, you should accept those cookies that allow the use of specific functions, resp. make it easier to use. You can review which cookies are used by us and to which purpose - and how long these are stored - in the following overview:

Cookie-Liste:

Name	Page	Function	Storage period
_ga	www.aengevelt.com	Contains a randomly generated user ID. Based on this ID, Google Analytics is able to recognize users that are returning to this website and merge the respective data with those from previous visits.	2 years
_gid	www.aengevelt.com	Contains a randomly generated user ID. Based on this ID, Google Analytics is able to recognize users that are returning to this website and merge the respective data with those from previous visits.	24 hours
_gat	www.aengevelt.com	Certain data are only sent to Google Analytics once a minute at the most. This cookie only exists for one minute. As long as this cookie is active, specific data transmissions are disabled.	1 minute
fe_typo_user	www.aengevelt.com	We use this cookie to record the requests that you or your browser send us during a single session. This cookie, therefore, allows you to stay logged on once you have logged in and to view all the pages in the login area.	Until the end of the session.
cookieconsentaengevelt	www.aengevelt.com	Saves the selected consent from the consent manager.	1 year

Right at the beginning of your visit, we inform you via our Consent Manager that we use services that require your consent on our website. Cookies that need to be set in connection with the use of these services are only set based on having received your consent in accordance with Art. 6, para. 1 (a) GDPR.

Cookie types:

In order to be able to explain the most common cookie types in more detail, we have provided explanations of these in the following to help you to understand them:

1. Session cookies:

The usage of session cookies allows users and the changes they make on a website to be identified. They allow the website to track their movements across individual pages so that information that has already been entered/stored does not have to be re-entered/stored again. Webshop shopping baskets are a good example of this. The session cookie stores the selected products in the shopping basket so that this contains the correct articles when payment is made at checkout. Session cookies are deleted when the user logs off or become invalid once the session has automatically expired.

2. Permanent or protocol cookies:

A permanent or protocol cookie stores the user’s information and settings on the user’s computer for the duration of the period defined by the respective expiration date. This allows quicker and easier access as you do not, for example, have to repeat the language settings or re-enter your login data. These cookies are automatically deleted when the storage period expires.

3. Third-party cookies:

As a rule, third-party cookies have no influence on the usage of the page as they do not originate from the operator of the website. They fulfill, for example, the purpose of collecting information for advertising purposes, personalized content and web statistics and for passing these on to the respective third-party provider.

4. Tracking cookies:

Tracking cookies are special text files which open up the possibility of collecting data on the behavior of the Internet user. This is aimed at gaining information on what the user’s main points of interest are, for example, to be able to launch made-to-measure promotional offers.

The examples of the most common types of cookies in the above representation is intended to provide you with a global overview of this type of data collection. The information contained therein does not claim to be complete. As a result of technical developments in the IT sector, it is to be assumed that further cookie types will be developed during the course of time. Prior to using our website, please refer at regular intervals to the Privacy Statement on our website to find out about the latest changes.

How to contact us

You will find various contact forms on our website that can be used to contact us electronically. Alternatively, you can also place a callback request using another contact form. It is also possible

to contact us via the email address provided. If you contact us via any one of these channels, we will process the personal data you entered and transmitted to us.

In the event that a contact form is used, the personal data processed consists of the master data entered in this form (last name, first name, salutation, email address) and, possibly, any further personal data that you entered in the “Message” field. If you contact us directly via email, we will record your email address and any personal data resulting from the text of your email.

If you use the contact form to place a callback request, we will also record the personal data that you provided via the input screen. This includes your name, telephone number and, if you additionally opt to provide this information, the company for which you work, as well as the subject of your callback request. To ensure that your data are transferred securely, we use a connection which deploys state of the art encryption with an SSL certificate.

This processing only takes place based on your having provided your consent in accordance with Art. 6, para. 1 (a) GDPR. You can revoke this consent at any time with future effect. To do so, please send us your revocation in an email addressed to datenschutz@aengevelt.com.

Request for brokerage services

Various additional contact forms provide you with the opportunity of inquiring about our brokerage services (https://www.aengevelt.com/en/homepage.html). We have individual forms for purchasing, selling, renting and letting. To ensure that your data are transferred securely, we use a connection which deploys state of the art encryption with an SSL certificate.

In the event that the contact form for inquiring about our brokerage services is used, we record all the details entered in the respective fields concerning the brokerage object as well as your master data. These include your last name, first name, title, email address and, if you additionally opt to provide this information, your address and telephone number.

In addition, there is also a contact form for each individual exposé. Once again, this involves the collection of your master data and all the personal data resulting from the “Your message” field. In addition, we will also match your request to the corresponding exposé.

Registration and newsletter

Our website offers you the option of creating a user profile for a protected area (https://www.aengevelt.com/login.html). This area is required to provide you with content, in particular, for downloading market reports. We are happy to provide you with market reports on this website. By registering your user account, you agree to regularly get information on the real estate market and Aengevelt's range of services via email. In order to prevent unauthorized registration on behalf of third parties, we will send you a confirmation email after you have registered for the first time, in which we ask you to confirm your registration. The legal basis for sending the newsletter after a successful double opt-in is Art. 6 para. 1 (a) GDPR. You can revoke your consent at any time with effect for the future, by unsubscribing from our newsletter. You can unsubscribe in our confirmation email as well as in each of our newsletters. During the registration process, we collect the following personal data via the input screen: Name, email address and any other information that you might provide. During the login process, a username and password are checked as part of the access control procedure. To ensure that your data

are transferred securely, we use a connection which deploys state of the art encryption with an SSL certificate. Your login and registration data are processed on the basis of our legitimate interest in accordance with Art. 6 para. 1 (f) GDPR. The interest is to protect your user account from unauthorized access by third parties.

Google Maps:

Our website uses the Google Maps map service via an API (application programming interface). The provider of this map service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In order to be able to use the Google Maps functions, your IP address needs to be saved. According to Google, this information is generally transferred to and stored on a server in Ireland. However, it cannot be ruled out that the parent company in the USA can also access these data. As the operator of this website, we have no influence on the respective transfer of these data. The information is not transmitted until you click the “Yes” button on the map. Upon activating the map, you automatically agree to the possible export of such data to a third country, i.e. the USA, in accordance with Art. 49, para. 1 (a) GDPR. The transfer of your data to the USA harbors certain risks, e.g. national authorities may gain access to your data through domestic laws (such as “FISA” - United States Foreign Intelligence Surveillance Act). The ability to enforce your rights as a data subject in accordance with Art. 15 ff. GDPR may also be restricted. If you do not wish to consent to the transfer of this information, please do not click on the button in the map. This allows you to continue using our website without a transfer taking place. You may also revoke your consent at any time by refreshing or reloading our website.

Google Maps is used with a view to presenting our online portfolio in an attractive way and to make it easy to find us at the locations stated on our website. This constitutes a legitimate interest as provided for in Art. 6, para. 1 (f) GDPR.

More information on the handling of user data can be found in Google’s Privacy Statement: policies.google.com/privacy.

Tracking tools (exports to third countries):

Our website makes use of the functions provided by a range of different web analysis services, such as Google. In the following, we shall explain in even more detail which individual services are involved and which data are analyzed.

Third country exports (risks):

Please note that when analyzed by such services (e.g. Google), your data may also potentially be transferred to third countries, such as the USA. The third country transfer of your data to countries such as the USA, where there is no GDPR-compliant or appropriate level of data protection, harbors certain risks which we would like to inform you about at this point. National laws, such as the United States Foreign Intelligence Surveillance Act (FISA), may permit domestic authorities (in the USA) to access information available to a provider on your person without your knowledge or consent if the authority believes there is an occasion to do so. In addition, you may be restricted in enforcing your rights as a data subject in accordance with Art. 15 ff. GDPR.

Upon agreeing to the use of the analysis tools on our website, you automatically consent to the possible transfer of your data to a third country in accordance with. Art. 49, para. 1 (a) GDPR.

Implementation of Google Analytics using the anonymization function

On our website, we implement Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA - hereinafter referred to as “Google”. Google Analytics uses cookies which allow your usage of our website to be analyzed. As a rule, the information created by these cookies on the usage of our online offer (e.g. when, where and how often you access our website, incl. your IP address) is transferred to and stored on a Google server in Ireland or the USA. You can find out more about the risks which may arise as a result in our Privacy Statement further up on this page.

In order to eliminate the possibility of linking your IP address to your person, it is immediately shortened after its collection (e.g. through the deletion of the last 8 bits), thus rendering it anonymous.

Further information on the processing of personal data by Google can be found at policies.google.com/privacy.

Your consent to the processing of your data in accordance with. Art. 6, para.1 (a) GDPR is provided via our Consent Manager (cookie banner). You can revoke this consent at any time with future effect (please see below).

If you wish to revoke your consent to the use of Google Analytics, please click on this link, to stop the transmission of analysis data to Google Analytics. The above link can also be used as an alternative to the browser add-on described above as it activates an “opt-out cookie” which is only valid for the browser and domain in question. If cookies are deleted in this browser, this cookie is also lost so that you will have to click on the link again.

Use of GA Audiences

On this website, data are collected and stored through GA Audiences, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA: “Google”). From these data, usage profiles can be created using pseudonyms. Through this technology, users who have already visited our web pages and online services see targeted advertising from us on other external sites within the Google Partner Network. To achieve this, a cookie is set on your computer which is used to analyze user behavior when visiting the website and which can then be used for targeted product recommendations and interest-based advertising purposes.

Further information on the processing of personal data by Google can be found at policies.google.com/privacy.

The processing of personal data takes place based on the consent you previously provided via our Consent Manager in accordance with Art. 6, para.1 (a) GDPR. You can revoke this consent at any time with future effect. To do so, please click on the following link.

Use of DoubleClick by Google

DoubleClick by Google is a service offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). DoubleClick by Google uses cookies to present advertisements that are relevant to your person. This is achieved by allocating a pseudonymous identification number (ID) to your browser to check which advertisements have been displayed in your browser and which advertisements have been called up. The use of DoubleClick cookies allows Google and their partner websites

to introduce specific advertisements based on previous visits to our or other Internet websites. The information generated by these cookies is transmitted by Google to a server in the USA where it is stored and used for evaluation purposes. You can find out more about the risks which may arise as a result in our Privacy Statement further up on this page.

Further information on the processing of personal data by Google can be found at policies.google.com/privacy.

LinkedIn Analytics

Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Every time one of our pages that contains a LinkedIn function is called up, a connection to the LinkedIn servers is made. LinkedIn is informed that you have visited our website using your IP address. If you click on LinkedIn’s “Recommend button” whilst logged into your LinkedIn account, it is also possible for LinkedIn to associate your visit to our website with your person and your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or their usage by LinkedIn.

More information on this topic can be found in LinkedIn’s Privacy Policy at: www.linkedin.com/legal/privacy-policy.

LinkedIn Ads (Insights)

We use the LinkedIn Insights retargeting service provided by the LinkedIn Ireland Unlimited Company in Ireland. This technology allows us to generate reports on the performance of our advertisements as well as information on website interaction. To enable this, the service has been integrated into our webpages, whereby a connection to the LinkedIn server is established if you visit these webpages whilst simultaneously logged into your LinkedIn account.

More information on data protection at LinkedIn can be found in LinkedIn’s Privacy Policy at: www.linkedin.com/legal/privacy-policy.

Further general information:

Changes to this Privacy Statement

We check this Privacy Statement on a regular basis to ensure that it complies with the legal provisions, the jurisprudence and the statements of the supervisory authorities, as well as to align it to emerging trends and the technological state of the art. In this respect, we reserve the right to change this Privacy Statement in order to adjust it in line with new legal data protection requirements or other changes in the factual or legal circumstances. We kindly ask, therefore, that you always check the information on our Privacy Statement applicable at the time prior to using our website.

Who is responsible for data processing? (Art. 13, para. 1 (a), (b) GDPR)

Responsible for data processing on our website is Aengevelt Immobilien GmbH & Co. KG (“Aengevelt”). Please refer to our Imprint for contact details: www.aengevelt.com/en/imprint.html

You can reach our Data Protection Officer at the following address:

Aengevelt Immobilien GmbH & Co. KG

Attn: Data Protection Officer

Kennedydamm 55 / Ross-Str. 166 40476 Düsseldorf Germany Tel. +49 211 8391-0 Fax +49 211 8391-255 datenschutz@aengevelt.com

Who receives your personal data? (Art. 13, para. 1 (e), (f) GDPR)

We treat your personal data confidentially and never pass these on to third parties unless you have provided us with your consent to do so, where these are made available based on a legal or contractual commitment or where their forwarding is necessary in order to complete pre-contractual measures, resp. fulfill a contract. In individual cases, we may contract a processor (e.g. IT service provider) to process your personal data. This is then carried out in accordance with Art. 28 GDPR and on the basis of a respective commissioned data processing contract.

How long are the data stored? (Art. 13, para. 2 (a) GDPR)

The legislator has imposed numerous retention periods and deadlines.

We only store your data as long as this is legally required.

Once these periods have lapsed, we delete the respective data as a matter of routine, in as far as they are no longer required with a view to fulfilling the contract. We store data that are processed based on your consent until this consent is revoked, resp. as long as these data are required. We store data that are processed based on a legitimate interest as long as this legitimate interest continues to exist.

In line with the legal provisions, commercial law data or financially-relevant data ensuing from a closed financial year are deleted after a further ten years have passed, in as far as no longer retention periods have been stipulated or are required for legitimate reasons. In as far as the data are not subject to specific retention periods, they are deleted when the purpose for which they were processed ceases to exist.

Which rights and obligations do you have? (Art. 13, para. 2 (b), (c), (d), (e) GDPR)

All data subjects have the following rights:

In accordance with Art. 15 GDPR, you have the right to receive information. This means that you can request confirmation from us as to whether your personal data are being processed by ourselves.
In accordance with Art. 16 GDPR, you have the right to rectification. This means that you can demand that we rectify any incorrect personal data concerning your person.
In accordance with Art. 17 GDPR, you have the right to erasure (“right to be forgotten”). This means that you can demand that we erase any personal data concerning your person without undue delay - unless we are unable to erase your data due to being required to observe, for example, legal retention periods.
In accordance with Art. 18 GDPR, you have the right to restriction of processing. This means that we are virtually no longer allowed to process your personal data - apart from storing them.
In accordance with Art. 20, GDPR, you have the right to data portability. This means that you have the right to receive the personal data concerning your person and that you have made available to us in a structured, commonly used and machine-readable format and to transmit these data to another controller.
In accordance with Art. 7, para. 3 GDPR, you have the right to revoke any consent you have provided at any time with future effect.
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the responsible supervisory authority.

In addition, you also have the right to object which we will be explaining in more detail at the end of this data protection information sheet.

If you would like to exercise any of your above rights, please contact our Data Protection Officer (see contact information listed above).

Responsible supervisory authority

State Data Protection Officer

North Rhine-Westphalia

Office address: Kavalleriestr. 2–4, 40312 Düsseldorf, Germany

Postal address: P.O. Box 200444, 40102 Düsseldorf, Germany

Tel.: +49 (0)211 38424-0 Email address: poststelle@ldi.nrw.de

Information on your right to object in accordance with Art. 21 General Data Protection Regulation (GDPR)

You have the right to object, on grounds resulting from your particular situation, at any time to the processing of personal data concerning your person which is carried out based on Art. 6, para. 1 (f) GDPR (data processing based on the weighing up of legitimate interests); this also applies to profiling based on this provision as described in Art. 4 (4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms or where this processing is for the establishment, exercise or defense of legal claims.

Please direct your objection in writing (via email or post) to the attention of our Data Protection Officer (see contact information listed above).