Privacy Statement

General Introduction:

We take the protection of your personal data very seriously and want to ensure your safety when you visit our Internet page. We handle data protection, in particular, in compliance with the provisions of the European General Data Protection Regulation, the Federal Data Protection Act (BSDG - new) and the German Telemedia Act (TMG). We would herewith like to inform you of the nature, scope and purpose of the processing of your personal data. To begin with, we would like to point out that this Privacy Statement solely refers to our own webpages and does not apply to any third-party webpage to which we may refer in the form of a link.

Object of protection:

The object of this Privacy Statement is to protect personal data. This includes all information that refers to an identified or identifiable natural person (hereinafter referred to as the “data subject”). This includes, in particular, all information that allows conclusions to be drawn as to your identity (e.g. details such as your name, postal address, email address and telephone number).

Technical requirements:

In order for you to be able to set up a connection to our website, your browser transfers specific data to the webserver of our website. This is a technical requirement that allows the information you called up to be made available to you by our website. This is achieved by storing your IP address, the date and time of your request, your operating system type and other information which is then stored and used for a maximum period of 7 days. We reserve the right to store these data for a limited period in order to safeguard our legitimate interests so as to be able to derive information from personal data in the case of unauthorized access or the attempt to deliberately cause damage to our company through this route (Art. 6, para. 1 (f) GDPR). These data shall be solely stored or transferred for this and no other purpose, whereby we shall not inform you of this or ask for your consent in advance.

Cookies:

Cookies are small text files that are stored by your browser on your computer or mobile terminal device to detect, for example, whether you visit the same webpages repeatedly from the same terminal device or browser. In general, we set cookies to analyze the interest in our website as well as to improve the user-friendliness of our website. In principle, however, you can also call up our website without using cookies.

As a rule, cookies can be deactivated or removed with the aid of special tools which are offered by most commercial browsers. For each browser that you use, you have to determine the settings separately and configure these individually. The different browsers offer a range of functions and options to this purpose.

For full and easy usage of our website, you should accept those cookies that allow the use of specific functions, resp. make it easier to use. You can review which cookies are used by us and to which purpose - and how long these are stored - in the following overview:

Right at the beginning of your visit, we inform you via our Consent Manager that we use services that require your consent on our website. Cookies that need to be set in connection with the use of these services are only set based on having received your consent in accordance with Art. 6, para. 1 (a) GDPR.

Cookie types:

In order to be able to explain the most common cookie types in more detail, we have provided explanations of these in the following to help you to understand them:

1. Session cookies:

The usage of session cookies allows users and the changes they make on a website to be identified. They allow the website to track their movements across individual pages so that information that has already been entered/stored does not have to be re-entered/stored again. Webshop shopping baskets are a good example of this. The session cookie stores the selected products in the shopping basket so that this contains the correct articles when payment is made at checkout. Session cookies are deleted when the user logs off or become invalid once the session has automatically expired.

2. Permanent or protocol cookies:

A permanent or protocol cookie stores the user’s information and settings on the user’s computer for the duration of the period defined by the respective expiration date. This allows quicker and easier access as you do not, for example, have to repeat the language settings or re-enter your login data. These cookies are automatically deleted when the storage period expires.

3. Third-party cookies:

As a rule, third-party cookies have no influence on the usage of the page as they do not originate from the operator of the website. They fulfill, for example, the purpose of collecting information for advertising purposes, personalized content and web statistics and for passing these on to the respective third-party provider.

4. Tracking cookies:

The examples of the most common types of cookies in the above representation is intended to provide you with a global overview of this type of data collection. The information contained therein does not claim to be complete. As a result of technical developments in the IT sector, it is to be assumed that further cookie types will be developed during the course of time. Prior to using our website, please refer at regular intervals to the Privacy Statement on our website to find out about the latest changes.

How to contact us

You will find various contact forms on our website that can be used to contact us electronically. Alternatively, you can also place a callback request using another contact form. It is also possible to contact us via the email address provided. If you contact us via any one of these channels, we will process the personal data you entered and transmitted to us.

In the event that a contact form is used, the personal data processed consists of the master data entered in this form (last name, first name, salutation, email address) and, possibly, any further personal data that you entered in the “Message” field. If you contact us directly via email, we will record your email address and any personal data resulting from the text of your email.

If you use the contact form to place a callback request, we will also record the personal data that you provided via the input screen. This includes your name, telephone number and, if you additionally opt to provide this information, the company for which you work, as well as the subject of your callback request. To ensure that your data are transferred securely, we use a connection which deploys state of the art encryption with an SSL certificate.

This processing only takes place based on your having provided your consent in accordance with Art. 6, para. 1 (a) GDPR. You can revoke this consent at any time with future effect. To do so, please send us your revocation in an email addressed to datenschutzaengevelt.com.

Request for brokerage services

Various additional contact forms provide you with the opportunity of inquiring about our brokerage services (https://www.aengevelt.com/immobilien.html). We have individual forms for purchasing, selling, renting and letting. To ensure that your data are transferred securely, we use a connection which deploys state of the art encryption with an SSL certificate.

In the event that the contact form for inquiring about our brokerage services is used, we record all the details entered in the respective fields concerning the brokerage object as well as your master data. These include your last name, first name, title, email address and, if you additionally opt to provide this information, your address and telephone number.

In addition, there is also a contact form for each individual exposé. Once again, this involves the collection of your master data and all the personal data resulting from the “Your message” field. In addition, we will also match your request to the corresponding exposé.

This processing only takes place based on your having provided your consent in accordance with Art. 6, para. 1 (a) GDPR. You can revoke this consent at any time with future effect. To do so, please send us your revocation in an email addressed to datenschutzaengevelt.com.

Registration and newsletter

Our website offers you the option of creating a user profile for a protected area (https://www.aengevelt.com/login.html). This area is required to provide you with content, in particular, for downloading market reports. We are happy to provide you with market reports on this website. By registering your user account, you agree to regularly get information on the real estate market and Aengevelt's range of services via email. In order to prevent unauthorized registration on behalf of third parties, we will send you a confirmation email after you have registered for the first time, in which we ask you to confirm your registration. The legal basis for sending the newsletter after a successful double opt-in is Art. 6 para. 1 (a) GDPR. You can revoke your consent at any time with effect for the future, by unsubscribing from our newsletter. You can unsubscribe in our confirmation email as well as in each of our newsletters. During the registration process, we collect the following personal data via the input screen: Name, email address and any other information that you might provide. During the login process, a username and password are checked as part of the access control procedure. To ensure that your data are transferred securely, we use a connection which deploys state of the art encryption with an SSL certificate. Your login and registration data are processed on the basis of our legitimate interest in accordance with Art. 6 para. 1 (f) GDPR. The interest is to protect your user account from unauthorized access by third parties.

Google Maps:

Our website uses the Google Maps map service via an API (application programming interface). The provider of this map service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In order to be able to use the Google Maps functions, your IP address needs to be saved. According to Google, this information is generally transferred to and stored on a server in Ireland. However, it cannot be ruled out that the parent company in the USA can also access these data. As the operator of this website, we have no influence on the respective transfer of these data. The information is not transmitted until you click the “Yes” button on the map. Upon activating the map, you automatically agree to the possible export of such data to a third country, i.e. the USA, in accordance with Art. 49, para. 1 (a) GDPR. The transfer of your data to the USA harbors certain risks, e.g. national authorities may gain access to your data through domestic laws (such as “FISA” - United States Foreign Intelligence Surveillance Act). The ability to enforce your rights as a data subject in accordance with Art. 15 ff. GDPR may also be restricted. If you do not wish to consent to the transfer of this information, please do not click on the button in the map. This allows you to continue using our website without a transfer taking place. You may also revoke your consent at any time by refreshing or reloading our website.

Google Maps is used with a view to presenting our online portfolio in an attractive way and to make it easy to find us at the locations stated on our website. This constitutes a legitimate interest as provided for in Art. 6, para. 1 (f) GDPR.

More information on the handling of user data can be found in Google’s Privacy Statement: https://policies.google.com/privacy?hl=de&gl=de

Tracking tools (exports to third countries):

Our website makes use of the functions provided by a range of different web analysis services, such as Google. In the following, we shall explain in even more detail which individual services are involved and which data are analyzed.

Third country exports (risks):

Please note that when analyzed by such services (e.g. Google), your data may also potentially be transferred to third countries, such as the USA. The third country transfer of your data to countries such as the USA, where there is no GDPR-compliant or appropriate level of data protection, harbors certain risks which we would like to inform you about at this point. National laws, such as the United States Foreign Intelligence Surveillance Act (FISA), may permit domestic authorities (in the USA) to access information available to a provider on your person without your knowledge or consent if the authority believes there is an occasion to do so. In addition, you may be restricted in enforcing your rights as a data subject in accordance with Art. 15 ff. GDPR.

Upon agreeing to the use of the analysis tools on our website, you automatically consent to the possible transfer of your data to a third country in accordance with. Art. 49, para. 1 (a) GDPR.

Implementation of Google Analytics using the anonymization function

On our website, we implement Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA - hereinafter referred to as “Google”. Google Analytics uses cookies which allow your usage of our website to be analyzed. As a rule, the information created by these cookies on the usage of our online offer (e.g. when, where and how often you access our website, incl. your IP address) is transferred to and stored on a Google server in Ireland or the USA. You can find out more about the risks which may arise as a result in our Privacy Statement further up on this page.

In order to eliminate the possibility of linking your IP address to your person, it is immediately shortened after its collection (e.g. through the deletion of the last 8 bits), thus rendering it anonymous.

Further information on the processing of personal data by Google can be found at https://policies.google.com/privacy?hl=de&fg=1.

Your consent to the processing of your data in accordance with. Art. 6, para.1 (a) GDPR is provided via our Consent Manager (cookie banner). You can revoke this consent at any time with future effect (please see below).

If you wish to revoke your consent to the use of Google Analytics, please click on this link to stop the transmission of analysis data to Google Analytics. The above link can also be used as an alternative to the browser add-on described above as it activates an “opt-out cookie” which is only valid for the browser and domain in question. If cookies are deleted in this browser, this cookie is also lost so that you will have to click on the link again.

Use of GA Audiences

On this website, data are collected and stored through GA Audiences, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA: “Google”). From these data, usage profiles can be created using pseudonyms. Through this technology, users who have already visited our web pages and online services see targeted advertising from us on other external sites within the Google Partner Network. To achieve this, a cookie is set on your computer which is used to analyze user behavior when visiting the website and which can then be used for targeted product recommendations and interest-based advertising purposes.

Further information on the processing of personal data by Google can be found at https://policies.google.com/privacy?hl=de&fg=1.

The processing of personal data takes place based on the consent you previously provided via our Consent Manager in accordance with Art. 6, para.1 (a) GDPR. You can revoke this consent at any time with future effect. To do so, please click on the following link.

Use of DoubleClick by Google

DoubleClick by Google is a service offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). DoubleClick by Google uses cookies to present advertisements that are relevant to your person. This is achieved by allocating a pseudonymous identification number (ID) to your browser to check which advertisements have been displayed in your browser and which advertisements have been called up. The use of DoubleClick cookies allows Google and their partner websites to introduce specific advertisements based on previous visits to our or other Internet websites. The information generated by these cookies is transmitted by Google to a server in the USA where it is stored and used for evaluation purposes. You can find out more about the risks which may arise as a result in our Privacy Statement further up on this page.

Further information on the processing of personal data by Google can be found at https://policies.google.com/privacy?hl=de&fg=1.

The processing of personal data takes place based on the consent you previously provided via our Consent Manager in accordance with Art. 6, para.1 (a) GDPR. You can revoke this consent at any time with future effect. To do so, please click on the following link.

LinkedIn Analytics

Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Every time one of our pages that contains a LinkedIn function is called up, a connection to the LinkedIn servers is made. LinkedIn is informed that you have visited our website using your IP address. If you click on LinkedIn’s “Recommend button” whilst logged into your LinkedIn account, it is also possible for LinkedIn to associate your visit to our website with your person and your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or their usage by LinkedIn.

More information on this topic can be found in LinkedIn’s Privacy Policy at: https://www.linkedin.com/legal/privacy-policy.

The processing of personal data takes place based on the consent you previously provided via our Consent Manager in accordance with Art. 6, para.1 (a) GDPR. You can revoke this consent at any time with future effect. To do so, please click on the following link.

LinkedIn Ads (Insights)

We use the LinkedIn Insights retargeting service provided by the LinkedIn Ireland Unlimited Company in Ireland. This technology allows us to generate reports on the performance of our advertisements as well as information on website interaction. To enable this, the service has been integrated into our webpages, whereby a connection to the LinkedIn server is established if you visit these webpages whilst simultaneously logged into your LinkedIn account.

More information on data protection at LinkedIn can be found in LinkedIn’s Privacy Policy at: https://www.linkedin.com/legal/privacy-policy

The processing of personal data takes place based on the consent you previously provided via our Consent Manager in accordance with Art. 6, para.1 (a) GDPR. You can revoke this consent at any time with future effect. To do so, please click on the following Link.

Further general information:

Changes to this Privacy Statement

We check this Privacy Statement on a regular basis to ensure that it complies with the legal provisions, the jurisprudence and the statements of the supervisory authorities, as well as to align it to emerging trends and the technological state of the art. In this respect, we reserve the right to change this Privacy Statement in order to adjust it in line with new legal data protection requirements or other changes in the factual or legal circumstances. We kindly ask, therefore, that you always check the information on our Privacy Statement applicable at the time prior to using our website.

Who is responsible for data processing? (Art. 13, para. 1 (a), (b) GDPR)

Responsible for data processing on our website is Aengevelt Immobilien GmbH & Co. KG (“Aengevelt”). Please refer to our Imprint for contact details: https://www.aengevelt.com/en/imprint.html

You can reach our Data Protection Officer at the following address:

Aengevelt Immobilien GmbH& Co. KG

Attn: Data Protection Officer

Kennedydamm 55 / Ross-Str. 166
40476 Düsseldorf
Tel. +49 211 8391-0
Fax +49 211 8391-255
datenschutzaengevelt.com

Who receives your personal data? (Art. 13, para. 1 (e), (f) GDPR)

We treat your personal data confidentially and never pass these on to third parties unless you have provided us with your consent to do so, where these are made available based on a legal or contractual commitment or where their forwarding is necessary in order to complete pre-contractual measures, resp. fulfill a contract. In individual cases, we may contract a processor (e.g. IT service provider) to process your personal data. This is then carried out in accordance with Art. 28 GDPR and on the basis of a respective commissioned data processing contract.

How long are the data stored? (Art. 13, para. 2 (a) GDPR)

The legislator has imposed numerous retention periods and deadlines.

We only store your data as long as this is legally required.

Once these periods have lapsed, we delete the respective data as a matter of routine, in as far as they are no longer required with a view to fulfilling the contract. We store data that are processed based on your consent until this consent is revoked, resp. as long as these data are required. We store data that are processed based on a legitimate interest as long as this legitimate interest continues to exist.

In line with the legal provisions, commercial law data or financially-relevant data ensuing from a closed financial year are deleted after a further ten years have passed, in as far as no longer retention periods have been stipulated or are required for legitimate reasons. In as far as the data are not subject to specific retention periods, they are deleted when the purpose for which they were processed ceases to exist.

For which purposes and on which legal basis do we process your personal data? (Art. 13, para. 1 (c), (d) GDPR)

We have already outlined the purposes and legal basis for processing data. In addition, the following generally applies: Where required, we process your data to safeguard our legitimate interests or those of other third parties in accordance with Art. 6, para. 1 (f) GDPR, for example to establish legal claims or to defend ourselves in legal disputes or to uphold our IT operations or security.

We process your data for purposes of external communications and marketing on the basis of Art. 6, para. 1 (a) or (f) GDPR in cases where we have a legitimate interest in doing so, or where we have received your written consent to process your personal data. You have the right to revoke your consent at any time.

In order to be able to comply with legal obligations, we are allowed to, or must, where required, process your data and pass these on to third parties (in accordance with Art. 6, para. 1 (c)).

In no case shall we use your data in an automated decision-making process or for profiling purposes.

Furthermore, we use cookies to be able to offer you an improved service when using our website and to make this website more convenient for you to use (Art. 6, para. 1 (f) GDPR).

Which rights and obligations do you have? (Art. 13, para. 2 (b), (c), (d), (e) GDPR)

All data subjects have the following rights:

• In accordance with Art. 15 GDPR you have the right to receive information. This means that you can request confirmation from us as to whether your personal data are being processed by ourselves.
• In accordance with Art. 16 GDPR you have the right to rectification. This means that you can demand that we rectify any incorrect personal data concerning your person.
• In accordance with Art. 17 GDPR you have the right to erasure (“right to be forgotten”). This means that you can demand that we erase any personal data concerning your person without undue delay - unless we are unable to erase your data due to being required to observe, for example, legal retention periods.
• In accordance with Art. 18 GDPR you have the right to restriction of processing. This means that we are virtually no longer allowed to process your personal data - apart from storing them.
• In accordance with Art. 20, GDPR you have the right to data portability. This means that you have the right to receive the personal data concerning your person and that you have made available to us in a structured, commonly used and machine-readable format and to transmit these data to another controller.
• In accordance with Art. 7, para. 3 GDPR you have the right to revoke any consent you have provided at any time with future effect.
• In accordance with Art. 77 GDPR you have the right to lodge a complaint with the responsible supervisory authority.

In addition, you also have the right to object which we will be explaining in more detail at the end of this data protection information sheet.

If you would like to exercise any of your above rights, please contact our Data Protection Officer (see contact information listed above).

Responsible supervisory authority

State Data Protection Officer
North Rhine-Westphalia
Office address: Kavalleriestr. 2–4, 40312 Düsseldorf, Germany
Postal address: P.O. Box 200444, 40102 Düsseldorf, Germany
Tel.: +49 (0)211 38424-0
Email address: poststelleldi.nrw.de

Information on your right to object in accordance with Art. 21 General Data Protection Regulation (GDPR)

You have the right to object, on grounds resulting from your particular situation, at any time to the processing of personal data concerning your person which is carried out based on Art. 6, para. 1 (f) GDPR (data processing based on the weighing up of legitimate interests); this also applies to profiling based on this provision as described in Art. 4 (4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms or where this processing is for the establishment, exercise or defense of legal claims.

Please direct your objection in writing (via email or post) to the attention of our Data Protection Officer (see contact information listed above).