Data protection

Data Protection Policy

We know that careful handling of your personal data is very important to you. We therefore take protecting your personal data very seriously and comply with the applicable provisions of law when we collect, process or use personal data. This Data Protection Policy applies only to our website at the URL www.isaria.ag. It does not apply to websites to which we merely refer through links.

Data controller

ISARIA Wohnbau AG
Leopoldstraße 8
80802 München-Schwabing

Phone: +49 (089) 38 99 84-0
Fax: +49 089 38 99 84-760

E-mail: info@isaria.ag

Web: www.isaria.ag

Court of registry: Local Court of Munich [Amtsgericht München]

Register number: HRB München 187909

 

Data protection officer

Data Protection Officer of ISARIA Wohnbau AG

Leopoldstraße 8
80802 Munich

Phone: +49 89 38 99 84-231
Fax: +49 89 38 99 84-790

E-mail: datenschutz@isaria.ag

Web: https://www.isaria.ag/   

 

Principles of data processing

Personal data are defined as any information that relates to an identified or identifiable natural person. It includes, for example, information such as your name, address, telephone number, e-mail address, IP address or user behavior. Information that we are unable (or able only at a disproportionate cost) to attribute to your person, for example because the information has been anonymized, does not constitute personal data. For personal data to be processed (e.g. collected, retrieved, used, stored or transferred), a legal basis for, or your consent to, that processing is always required. Processed personal data are erased as soon as the purpose for which they were processed is achieved and there are no further legally imposed preservation duties to observe.

In regard to any data processing we undertake for the purpose of providing certain services, we provide information below concerning the specific processing operations, the scope and purpose of the data processing, the legal basis for the processing, and how long the processed data are stored.

Individual processing operations

Provision and use of the website

Manner and scope of data processing

When you visit and use our website, we collect the personal data that your browser automatically transmits to our server. This information is temporarily stored in what is referred to as a “log file”. If you use our website, we collect the following data, which for technical reasons are needed to display our website and ensure stability and security:

- IP address of the retrieving computer

- Date and time of access

- Name and URL of the file that is retrieved

- Website from which our website was accessed (the referrer URL)

- The browser used and, in some cases, your computer’s operating system

- The name of your access provider

Legal basis

Art. 6(1) sent. 1 lit. f GDPR (EU General Data Protection Regulation) constitutes the legal basis for the data processing referred to. Processing the aforementioned data is necessary to provide the website and hence serves a legitimate interest of our company.

Storage period

These data are erased once they are no longer necessary to display the website. Collection of data for the purpose of providing the website and storage of the data in log files is absolutely necessary for operation of the website. Consequently, the user does not have the option of opposing it. The data may be stored for a longer period of time if the law so requires.

Newsletter

Manner and scope of data processing

You can subscribe to a free newsletter on our website. We need the following information from you in order to send you the newsletter on a regular basis:

- E-mail address

For the purpose of sending you the newsletter, your data are disclosed to our newsletter service provider. No other disclosure of data is made. To distribute our newsletter we follow the “double opt-in” procedure; i.e., we will send the newsletter to you only if you have previously confirmed your subscription by clicking on a link contained in a confirmation e-mail message sent to you for this purpose. We do this to ensure that only you, as the holder of the e-mail address that is submitted to us, are able to subscribe to the newsletter. You must confirm your subscription promptly upon receipt of the confirmation e-mail as, otherwise, your newsletter subscription will be automatically deleted from our database.

Legal basis

Processing of your e-mail address for the purpose of sending you the newsletter is based, in accordance with Art. 6(1) sent. 1 lit. a GDPR, on the following declaration of consent as submitted voluntarily by you:

Declaration of consent:

By entering my data and confirming my entries with the “Sign Up” button, I consent to the processing of my e-mail address for regular receipt of the newsletter. I may discontinue the newsletter service at any time by clicking the appropriate link at the bottom of the newsletter. I have read, and I accept, the current Data Protection Policy. I may at any time revoke my consent to collection of the personal data entered during the sign-up process by contacting datenschutz@isaria.ag or info@isaria.ag.

You may at any time revoke for the future your consent to the use of your personal data by sending an e-mail message to the e-mail address provided in the Data Protection Policy or to our data protection officer.

Storage period

Your e-mail address will be stored for as long as you are subscribed to our newsletter. Your e-mail address will be deleted if you unsubscribe from the newsletter. The data may be stored for a longer period of time in a particular case if the law so requires.

Contact form

Manner and scope of data processing

We provide a form on our website through which you can contact us. The process of submitting your request through the contact form includes a reference to this Data Protection Policy for the purpose of obtaining your consent. The following personal data concerning you are processed through the contact form if you use it:

- First name

- Last name

- E-mail address

- Telephone number if needed

- Subject

- Content of the message

Disclosing your e-mail address serves the purpose of proper attribution of your request so that we are able to reply to it. No data are disclosed to third parties when you use the contact form.

Legal basis

Data are processed as previously described for the purpose of contacting you, in accordance with Art. 6(1) sent. 1 lit. a GDPR, on the basis of the voluntarily issued declaration of consent that appears below.

Declaration of consent:

By entering my data and confirming my entries with the “Contact Us” button, I consent to the processing of my e-mail address, my first and last names, and my telephone number so that my contact request can be answered. I have read, and I accept, the current Data Protection Policy. I may revoke this consent at any time by writing to datenschutz@isaria.ag or info@isaria.ag.

You may at any time revoke for the future your consent to the use of your personal data by sending an e-mail message to the e-mail address provided in the Data Protection Policy or to our data protection officer.

Storage period

Once your request has been attended to and the issue in question is finally resolved, the personal data concerning you that have been processed through the contact form will be deleted. The data may be stored for a longer period of time in a particular case if the law so requires.

Means of contacting us on our website

Our website provides various options for contacting us by e-mail.

Manner and scope of data processing

All visitors to the website may send their requests or concerns to these e-mail addresses. Requests sent to us by e-mail are dealt with by the appropriate departments. Our collection of data in this case is limited to the address of the e-mail account you used to contact us along with any personal data you may have provided when contacting us.

Legal basis

The lawfulness of the data collection is based on Art. 6(1) sent. 1 lit. f GDPR as there is a coequal interest in establishing contact and communication between you and our company and a legitimate interest in processing the aforementioned data so that your request or concern can be dealt with.

Storage period

How long the data referred to above are stored depends on the circumstances of your contacting us. Your data are regularly deleted if the purpose pursued by the communication no longer applies and storage of those data is no longer required (for example, after your request or concern has been dealt with).

Disclosure of data

We disclose your data to third parties only if:

- you have consented to such disclosure in accordance with Art. 6(1) sent. 1 lit. a GDPR

- such disclosure is permitted by law and is, in accordance with Art. 6(1) sent. 1 lit. b GDPR, required for performance of a contract with you

- a legal obligation exists to make such disclosure in accordance with Art. 6(1) sent. 1 lit. c GDPR

- such disclosure is, in accordance with Art. 6(1) sent. 1 lit. f GDPR, required for protection of legitimate company interests, or to assert, exercise or defend legal claims, and there is no reason to assume that you have an overriding protectable interest in non-disclosure of your data.

Use of cookies

Manner and scope of data processing

We use cookies on our website. Cookies are small files that are sent by us to the browser on your terminal device and stored there when you visit our website. Some of the functions of our website cannot be provided without the use of technically necessary cookies. Other cookies provide us with various analytical capabilities. Cookies are able, for example, to recognize the browser you are using when you revisit our website and to send us various types of information. With the aid of cookies we can, among other things, design our Internet content to be more user-friendly and effective for you by considering how you have used our website and identifying your preferred settings (such as country and language settings). If third parties process information obtained through cookies, they collect the information directly through your browser. Cookies do not damage your terminal device. They cannot execute programs, and they contain no viruses. On our website we use various kinds of cookies the nature and function of which is explained in greater detail below.

Transient cookies

Transient cookies, which are automatically deleted as soon as you close your browser, are used on our website. This type of cookie is used to record your session ID. This makes it possible to attribute the various queries from your browser to one common session, enabling us to recognize your terminal device on later visits to our website.

Persistent cookies

Persistent cookies are used on our website. Persistent cookies are cookies that are stored in your browser over a long period of time and send information to us. The storage period varies with the cookie. You can delete persistent cookies on your own by means of your browser settings.

Cookies for marketing and social media

Advertising cookies (third-party providers) make it possible to display to you various offers that match your interests. These cookies can be used to capture the user’s activities on the web over a long period of time. The cookies may be able to recognize you on different terminal devices that you use.

The following third-party providers receive data with a personal reference through cookies incorporated into our website: Google Analytics.

In addition, certain cookies make it possible to establish a connection to your social networks and to share the contents of our website within your networks.

Legal basis

Owing to the purposes as described for which personal data are processed with the use of cookies, the legal basis for that processing lies in Art. 6(1) sent. 1 lit. f GDPR. If you have consented to the use of cookies on the basis of a notice placed on our website (“cookie banner”), the lawfulness of that use is governed in addition by Art. 6(1) sent. 1 lit. a GDPR.

Storage period

As soon as the data sent to us by the cookies is no longer necessary to achieve the purposes described above, that information is deleted. The data may be stored for a longer period of time if the law so requires.

Configuration of browser settings

Most browsers are preset to accept cookies by default. You can, however, configure your browser so that it accepts only specific cookies or no cookies at all. We must point out, however, that you may no longer be able to make use of the full functionality of our website if cookies from our website are disabled in your browser settings. You can also use your browser settings to delete cookies that are already stored in your browser. It is possible also to set your browser to notify you before cookies are stored. Because different browsers may differ in how they work, please consult your browser’s help menü for information on your browser’s various configuration options. If you would like to have a comprehensive history of all third-party access to your web browser, we recommend that you install a plug-in that has been specially developed for that purpose.

Tracking and analysis tools

We use tracking and analysis tools to ensure that our website is continually optimized and that its design meets the needs of its visitors. With the aid of tracking tools we are able also to statistically capture the use of our website by visitors and, using the knowledge gained thereby, continue to improve our online content for you. Use of the tracking and analysis tools described below is justified on the basis of these interests according to Art. 6(1) sent. 1 lit. f GDPR. If you have consented to the use of cookies on the basis of a notice placed on our website (“cookie banner”), the lawfulness of that use is governed in addition by Art. 6(1) sent. 1 lit. a GDPR. The description below of the tracking and analysis tools includes a description of the various purposes that data processing serves and of the data that are processed.

Google Analytics

Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (“Google”), is used on this website. Google Analytics uses so-called “cookies”, which are text files that are stored on your computer and that make it possible to analyze your use of the website.

The information generated by these cookies concerning your use of our website is usually sent to a Google server in the USA and stored there. For our website we have activated IP address anonymization, whereby the IP addresses of Google users within the Member States of the European Union, or in other signatories to the Agreement on the European Economic Area, are truncated by Google in advance.

Google will use this information on our behalf to analyze your use of our website, to compile reports on the website activities, and to provide us, as a website operator, with other services associated with website and Internet use.

If your IP address is relayed by your browser as a result of the Google Analytics process, Google does not combine that information with other data.

You can prevent the cookies from being stored by means of the appropriate setting in your browser software. We must point out, however, that you may not be able to make use of the full functionality of our website if you do so.

In addition, you can prevent the data generated by the cookie and relating to your use of the website (including your IP address) from being collected and transferred to Google, and from being used by Google, by downloading and installing the browser plug-in that is available through the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser plug-in, you may also – particularly in the case of mobile terminal devices – prevent, with the terminal device and browser you are using, Google Analytics from collecting data on this website in the future by clicking on the following link, which will cause an opt-out cookie to be stored on your terminal device: https://tools.google.com/dlpage/gaoptout?hl=de

Please note that, if you delete the cookies in that browser, the opt-out cookie will be deleted along with them, and you will have to click on the above link again if you wish to continue blocking the collection of your data. Information provided by Google on how Google collects, processes and uses your data can be found on Google’s website under “How Google uses information from sites or apps that use our services” (http://www.google.de/policies/privacy/partners/), under “Data privacy and security” (https://support.google.com/analytics/answer/6004245?hl=en) and in Google’s Terms of Service (https://www.google.com/analytics/terms/us.html). We assume no responsibility for the information provided by Google.

Google Maps

This website uses the Google Maps API to visually represent geographical information. When you use Google Maps, Google collects, processes and uses data on visitors’ use of the map functions. You will find more detailed information on Google’s data processing in the Google Privacy Policy (http://www.google.com/policies/privacy/). There you can also change your personal data protection settings in the Data Protection Center.

Detailed instructions for managing your own data in connection with Google products can be found here: https://support.google.com/accounts#topic=3382296

YouTube

User information is processed when you access or watch videos embedded in our website that are provided from the YouTube platform.

The provider of the YouTube platform is YouTube LLC (901 Cherry Ave., San Bruno, CA 94066, USA), which is a subsidiary of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Use of content offered on YouTube requires a connection to YouTube’s servers in the USA. When videos are retrieved and watched, data that can be attributed to you are transferred to YouTube. In addition, YouTube uses cookies to store data that can be attributed to you. If you are logged into YouTube as a member, YouTube is able to attribute those data to your personal user account. You can prevent this attribution by logging off YouTube before retrieving the video. Further information about YouTube and how YouTube collects, processes and uses your data can be found at the following Internet address: https://www.google.de/intl/de/policies/privacy/. We assume no responsibility for this information.

Social networks

To make our website more attractive and user-friendly, we provide links to selected social media platforms (among which are Facebook, Google+, Twitter, LinkedIn) in various places on that website through so-called “social bookmarks”. Social bookmarks are Internet bookmarks by which users of such a service can collect links and news reports. We do not, however, use any social plug-ins such as the “Like” button on Facebook. We protect your privacy by not incorporating social networks into our website and by providing links only. Data are transferred to a social network only when you click on one of the links. For information about how your personal data are handled when you use those websites, please read the data privacy policies of their providers.

Hyperlinks

Our website contains so-called “hyperlinks” to the websites of other providers. Activating these hyperlinks takes you directly from our website to the website of the other provider. You can tell when this happens by the change of URL, among other things. We can assume no responsibility for the confidentiality of your data on such third-party websites since we are unable to control whether those companies comply with data protection policy. For information on how your personal data are handled by those companies, please consult their websites directly.

Rights of data subjects

As the subject of personal data processing, you have the following rights under the GDPR:

Right of access, Art. 15 GDPR: If your personal data are being processed, then you have the right to information concerning the data pertaining to your person that have been stored.

Right to rectification, Art. 16 GDPR: Should personal information be processed that is inaccurate, you have the right to have that information corrected.

Right to erasure, right to limit processing, Art. 17 and 18 GDPR: Subject to certain legal conditions, you have the right to have your data erased and to limit the processing of your data.

Right to data portability, Art. 20 GDPR: If you have consented to data processing or there exists a contract for data processing and the data processing is performed with the aid of automated processes, then you have a right to data portability.

Right to object, Art. 21 GDPR: You have the right to object at any time to the processing of your personal data.

Right to lodge a complaint with a supervisory authority, Art. 77 GDPR: You have the right to lodge a complaint with a competent supervisory authority (in the Member State in which you have your customary place of residence).

Right to revocation, § 51 BDSG [Bundesdatenschutzgesetz, German Federal Data Protection Act] (new): If the processing of your personal data is based on Art. 6(1) sent. 1 lit a GDPR or Art. 9(2) lit. a GDPR, then you have the right to revoke your consent at any time. Your revocation will not affect the lawfulness of the processing that occurred on the basis of your consent before that consent was revoked.

Right to object, Art. 21 GDPR

You have the right to object at any time, for reasons relating to your particular situation, to processing of your personal data that is undertaken on the basis of Art. 6(1) sent. 1 lit. e GDPR (data processing in the public interest) or Art. 6(1) sent. 1 lit. f GDPR (data processing on the basis of a balancing of interests). If you raise an objection, we will no longer process your personal data unless we can show compelling protectable grounds for the processing that outweigh your interests, rights and freedoms or the processing serves the purpose of asserting, exercising or defending legal claims.

If we process your personal data for direct marketing purposes, then you have the right to object at any time to the processing of your personal data for the purpose of that sort of advertising to the extent that the processing is undertaken in connection with such direct marketing. If you object to data processing for direct marketing purposes, then we will no longer process your personal data for these purposes.

You can make your objection informally and free of charge, stating your name and your address. If you would like to assert a right to object on grounds relating to your particular situation, then please also briefly present the relevant reasons.

Your objection should be addressed to:

Data Protection Officer of ISARIA Wohnbau AG

Leopoldstraße 8

80802 Munich

Phone: +49 89 38 99 84-231

Fax: +49 89 38 99 84-790

E-mail: datenschutz@isaria.ag

Web: http://www.isaria.ag/

Data security and security measures

We are committed to protecting your privacy and treating your personal data confidentially. To prevent your personal data from being manipulated, lost or misused while in our safekeeping, we take extensive technical and organizational security precautions that are regularly reviewed and adapted to advances in technology. These include, among other things, use of recognized encryption methods (SSL or TLS). We must point out, however, that the structure of the Internet is such that the rules of data protection and the aforementioned security measures may not be observed by other persons or institutions lying outside our sphere of responsibility. In particular, third parties may be able to read data that are disclosed in unencrypted form, e.g. when they are contained in an unencrypted e-mail message. We have no technical control over this sort of activity. It is the user’s responsibility to protect user-provided data, by means of encryption or by other means, from misuse.

Amendments to the Data Protection Policy

We reserve the right to update this Policy as needed to keep it aligned in content with the website. We will update this Policy to the same extent if there are changes in the law that make doing so necessary.

Should you have further questions on the topic of data protection that our Data Protection Policy has not been able to answer, please contact our data protection officer. We will get in touch with you as quickly as possible.