Information obligations and privacy policy in accordance with the EU GDPR
The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is
FLEXMAKLER GmbH
Döringstr. 7
10245 Berlin
Data protection and data security are very important in our business as a real estate agent and provider of property-related services. In order to fulfil our tasks, we rely on the trust of our customers and business partners to provide us with the necessary data and information that we require for qualified services and optimal advice.
We justify this trust by, among other things, handling the personal data provided to us with particular care and responsibility. In the following, we will inform you about the collection, processing and use of the data you provide to us in accordance with the main provisions of the General Data Protection Regulation. We distinguish between two basic areas:
1. data protection at a glance
General information
This privacy policy explains the type, scope and purpose of the processing of personal data (hereinafter referred to as „data“) within our online offering and the associated websites, functions and content as well as external online presences, such as our social media profile, and the rights to which you are entitled. The following information provides a simplified overview of what happens to your personal data when you visit our website. Personal data is any data with which you can be personally identified (Art. 4 No. 1 GDPR).
Data collection in the context of our business activities
Contract data
We collect, process and store the data you provide when you place an order with us. We also store and process data about the order and payment process. This includes
- Inventory data (e.g., names, addresses)
- Contact details (e.g., e-mail, telephone numbers)
- Content data (e.g., text entries, photographs, videos)
- Usage data (e.g., websites visited, interest in content, access times)
- Meta/communication data (e.g., device information, IP addresses).
Business information
Only with your express consent will we use your data to send you additional business information, for example online by newsletter, by post in writing or by fax.
Data collection on our website
Who is responsible for data collection on our website?
Data processing on this website is carried out by the data centres where the website is hosted.
WebGo GmbH
Heidenkampsweg 81 20097 Hamburg
Phone: +49 40 605 900 399
E-mail: [email protected]
How do we collect your data?
- Data is collected when you provide it to us yourself. This may, for example, be data that you may transmit via a contact form.
- The IT systems automatically collect further data when the website is accessed. This is primarily technical data (e.g. internet browser, operating system or date and time of the page view).
What is your data used for?
- Provision of the online offer, its functions and contents
- Answering contact enquiries and communicating with users
- Safety measures
- Reach measurement/marketing
Analysis and third-party tools
When you visit our website, your surfing behaviour may be statistically evaluated. This is mainly done using cookies and so-called analysis programmes. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following sections of this privacy policy.
2 General notes and mandatory information
Data protection
We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. When you use this website, various personal data is collected. Personal data is any data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done. We would like to point out that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not technically possible.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and, depending on the browser used, by the lock symbol in your browser address bar. If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties according to the current state of technology.
3. data protection officer
According to the law, no data protection officer is required by law at From our company; we therefore do not have a data protection officer.
4. data collection on our website
Cookies
This website partly uses so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective, convenient and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser on your next visit. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted. Cookies that are required to carry out the electronic communication process or to provide certain functions you wish to use (e.g. shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the storage of cookies for the technically error-free and optimised provision of our services. The data is not stored together with other personal data of the user. When accessing our website, users can be informed about the use of cookies for analysis purposes by an information banner and referred to this privacy policy. Insofar as other cookies (e.g. cookies to analyse your surfing behaviour) are stored, these are treated separately in this privacy policy. The following cookies are used by this website:
1st session cookie
There is no personal allocation.
2. cookie to display cookie information
Cookie name Value of the confirmation of the cookie information (true or false) Session ID Host name Validity period of the cookie is 1 year
There is no personal allocation.
3. shopping basket cookie in the shop area
Cookie name Value of the confirmation of the cookie information (true or false) Session ID Host name Validity period of the cookie is 24 minutes
There is no personal allocation.
4. cookies that enable an analysis of the user's surfing behaviour
There is no personal allocation.
Server log files
The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are
- Browser type and browser version
- Operating system used
- Referrer URL
- Time of the server request
- IP address (V4, V6) We use the IP anonymisation function on this website. This means that your IP address is stored in abbreviated form.
Contact form
Processing of data (customer and contract data)
We collect, process and use personal data only insofar as it is necessary for the establishment, content or amendment of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. We collect, process and use personal data about the use of our website (usage data) only insofar as this is necessary to enable the user to use the service or to bill the user. The customer data collected will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.
Data transmission upon conclusion of a contract for services and digital content
We only transfer personal data to third parties if this is necessary in the context of contract processing. Depending on the payment method selected, we currently transmit the data to the relevant credit institution and, in the case of domain registrations, to the responsible registry. Further transmission of the data does not take place or only takes place if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
5. social media
Privacy policy for the use of Facebook plugins (Like button)
Plugins of the social network Facebook, provider Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our pages. You can recognise the Facebook plugins by the Facebook logo or the „Like“ button on our site. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/. When you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin. Facebook receives the information that you have visited our site with your IP address. If you click on the Facebook „Like“ button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. Further information on this can be found in Facebook's privacy policy at https://de-de.facebook.com/policy.php. If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.
Privacy policy for the use of Instagram
Functions of the Instagram service are integrated on our pages. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. Further information on this can be found in Instagram's privacy policy: https://instagram.com/about/legal/privacy/
6. analysis tools and advertising
Privacy policy for the use of Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called „cookies“. These are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de
Privacy policy for the use of Google AdWords
Our website uses AdWords, a technology from Google. On the one hand, we use conversion tracking. This means that we can use a cookie to recognise which ad from the AdWords network brought you to us and what behaviour was triggered on our site. This gives us a better picture of the effectiveness of our adverts and we use the data for statistical and market research purposes. This data is anonymous to us. This means that we cannot attribute it to you personally.
Our website also uses the remarketing function of Google Adwords. This function helps us to present interest-based adverts to our visitors. Your browser stores cookies on your device that enable us to recognise you when you visit websites that belong to the Google advertising network. This allows you to be presented with adverts that relate to content that you have previously viewed on other websites. We do not receive any personal data from you as a result. You can deactivate the remarketing function by making the appropriate settings at https://www.google.com/settings/ads. https://support.google.com/analytics/answer/6004245?hl=de
Browser plugin
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Deactivate Google Analytics
Newsletter
On the basis of your express consent, we will send you regular newsletters from FLEXMAKLER and FLEXHYPO or comparable information by e-mail to the e-mail address you have provided. To receive the newsletter, it is sufficient to provide your e-mail address. When you register to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by e-mail about circumstances relevant to the service or registration (e.g. changes to the newsletter offer or technical circumstances). We require a valid e-mail address for effective registration. We use the „double opt-in“ procedure to check that a registration is actually made by the owner of an e-mail address. For this purpose, we log the subscription to the newsletter, the sending of a confirmation email and the receipt of the requested reply. No further data is collected. The data is used exclusively for sending the newsletter and is not passed on to third parties. You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your wish to do so via the contact option provided at the end of this data protection notice.
7. plugins and tools
Google Maps
We use the „Google Maps“ component of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as „Google“, on our website. Each time the „Google Maps“ component is called up, Google sets a cookie to process user settings and data when the page on which the „Google Maps“ component is integrated is displayed. As a rule, this cookie is not deleted when the browser is closed, but expires after a certain period of time, unless you delete it manually beforehand. If you do not agree to this processing of your data, you have the option of deactivating the „Google Maps“ service and thus preventing the transfer of data to Google. To do this, you must deactivate the Java Script function in your browser. However, we would like to point out that in this case you will not be able to use „Google Maps“ or only to a limited extent. The use of „Google Maps“ and the information obtained via „Google Maps“ is subject to the Google Terms of Use, see https://www.google.de/intl/de/policies/terms/regional.html and the additional terms and conditions for „Google Maps“ https://www.google.com/intl/de_de/help/terms_maps.html
Google Sitemaps
We use the „Google Sitemaps“ application on our website for the purpose of search engine optimisation. The website's table of contents is saved by „Google Sitemaps“. For this purpose, the browser you are using must connect to Google's servers. This informs Google that our website has been accessed via your IP address.
Google Webmaster Tools
We use the „Google Webmaster Tools“ application on our website for the purpose of ongoing performance and error control. The website's table of contents is saved by „Google Sitemaps“. For this purpose, the browser you are using must connect to Google's servers. As a result, Google becomes aware that our website has been accessed via your IP address.
Youtube
On our website, we use components (videos) from YouTube, LLC 901 Cherry Ave, 94066 San Bruno, CA, USA, a company of Google Inc, Amphitheatre Parkway, Mountain View, CA 94043, USA. We use the “ - extended data protection mode - „ option provided by YouTube. When you access a page that has an embedded video, a connection to the YouTube servers is established and the content is displayed on the website by notifying your browser. According to YouTube, in “ - extended data protection mode -“ only data is transmitted to the YouTube server, in particular which of our Internet pages you have visited when you watch the video. If you are logged in to YouTube at the same time, this information will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website. Further information on data protection from YouTube is provided by Google at the following link:
8. payment provider
PayPal
On our website we offer, among other things, payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”). If you select payment via PayPal, the payment data you enter will be transmitted to PayPal. The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the fulfilment of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations in the past.
9. automated decision-making / profiling
We do not carry out automated decision-making or profiling.
10. your rights
a) Right to information and confirmation
You have the right to receive free information and confirmation from us at any time about the personal data stored about you and a copy of this information.
b) Right of rectification
You have the right to request the immediate rectification of inaccurate personal data concerning you. You also have the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing.
c) Cancellation rights
You have the right to obtain the erasure of personal data concerning you without undue delay where one of the following grounds applies and insofar as the processing is not necessary
- The personal data was collected or otherwise processed for purposes for which it is no longer necessary.
- You withdraw your consent on which the processing was based and there is no other legal basis for the processing.
- You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
- The personal data was processed unlawfully.
- The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject.
- The personal data was collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.
d) Right to restriction of processing
You have the right to request the restriction of processing if one of the following conditions is met:
- The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
- The processing is unlawful, you oppose the erasure of the personal data and request the restriction of the use of the personal data instead.
- We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims.
- You have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet clear whether our legitimate grounds override yours.
e) Rights to object to the processing
You have the right to object at any time to the processing of personal data concerning you that is carried out on the basis of Article 6(1)(e) or (f) GDPR. In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You have the right to object at any time to the processing of your personal data for the purpose of direct marketing.
f) Right to data portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent pursuant to point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR or on a contract pursuant to point (b) of Article 6(1) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Furthermore, in exercising your right to data portability pursuant to Art. 20 (1) GDPR, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.
g) Right to withdraw consent under data protection law
You have the right to withdraw your consent to the processing of personal data at any time. Many data processing operations are only possible with your express consent. You can withdraw any consent you have already given at any time. All you need to do is send us an informal e-mail. Please note that e-mails sometimes do not arrive. If you do not receive a response from us, please contact us by other means. The legality of the data processing carried out until the cancellation remains unaffected by the cancellation. In most cases, the data processing is related to the possibility of contract fulfilment, so that the corresponding services can no longer be used and the services concerned can no longer be provided in the event of revocation.
h) Right to lodge a complaint with the supervisory authority
In the event of breaches of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
11. legal or contractual provisions for the provision of personal data, necessity for the conclusion of the contract, obligation to provide the personal data, possible consequences of non-provision
The provision of personal data may be required in part by law (e.g. tax regulations) or may also result from contractual provisions (e.g. details of the contractual partner). Sometimes it may be necessary for you to provide us with personal data in order to conclude a contract, which must subsequently be processed by us. For example, you are obliged to provide us with personal data if we conclude a contract with you. Failure to provide the personal data would mean that the contract could not be concluded.
12. objection to advertising spam
We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. We reserve the right to take legal action against the unwanted and unsolicited sending of advertising material. This applies in particular to so-called spam e-mails, spam letters and spam faxes. We would like to point out that the unauthorised transmission of advertising material can affect competition law, civil law and criminal law. Spam e-mails and spam faxes in particular can lead to high claims for damages if they disrupt business operations by overfilling mailboxes or fax machines.
13. brokerage services
We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. We reserve the right to take legal action against the unwanted and unsolicited sending of advertising material. This applies in particular to so-called spam e-mails, spam letters and spam faxes. We would like to point out that the unauthorised transmission of advertising material can affect competition law, civil law and criminal law. Spam e-mails and spam faxes in particular can lead to high claims for damages if they disrupt business operations by overfilling mailboxes or fax machines.
14. amendment of our data protection provisions
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
