Privacy statement

§ 1 Information on the collection of personal data and purpose of processing

(1) In the following, we inform you about the collection of personal information when using our website Personal data includes all data that related to you personally, such as Name, address, E-mail addresses, user behaviour. The purpose of the processing is to operate an internet page for the purposes of mediating living spaces.

(2) Responsible according to Art. 4, para. 7 of the EU Data Protection Regulation (DS-GVO) is:

Immobilien-Service in Franken GmbH
Hallplatz 15-19 / 2^nd floor
D-90402 Nuremberg, Germany
Represented by the Managing Director
Manuela Zollner
Thomas V. Basel
Phone:   +49(0) 911 19430, +49(0) 911 2418471
Fax:   +49(0) 911 223297
E-Mail: info@mitwohnzentrale-franken.de


(3) When you contact us by E-mail or via a contact form on our website, the data communicated by you (your e-mail address, if applicable, your name and your phone number) is stored by us, to answer your questions. In this context, we will delete the data after the storage is no longer required, or restrict the processing, if statutory retention obligations exist.

(4) If we commission service providers for individual functions of our offer or want to use your data for advertising purposes, we will inform you in detail about the procedures below. This is what we call the defined criteria of storage duration.

§2 Your rights

(1) You have the following rights against us in respect of the personal data concerning you:

• Right to information (Art. 15 DS-GVO),
• Right to correction or deletion (Art. 16 und 17 DS-GVO),
• Right to restriction of the processing (Art. 18 DS-GVO),
• Right to contradiction against the processing (Art. 21 DS-GVO),
• Right to data transferability (Art. 20 DS-GVO),
• Right to revocation of issued consent (Art. 7 paragraph 3 DS-GVO).

Please contact the contact address under Section 1 II above.

(2) You also have the right to complain to a data protection supervisory authority concerning the processing of your personal data by us.

 

§ 3 Collection of personal data when you visit our website

(1) In general, for the use of our website you do not need to specify personal data. However, in order for us to be able to provide our services, we need your personal data. This applies both to the sending of information material as well as for the answering individual requests. In these cases, we collect and store your personal data only to the extent necessary for the provision of the service or for the implementation of orders.

(2) If you want to view our website, we may collect the following data which is technically necessary for us to provide you with our website to ensure stability and security (legal basis is Art. 6 Abs. 1 p. 1 lit. f DS-GVO):

• Date and time of the access
• Name of websites opened
• Name of files downloaded
• Transferred data quantity
• Status code of the access (successful/erroneous)
• Used browser type and version
• User’s operating system
• URL of the website from which our website was opened
• ID address of the computer used to open
• Provider that provides access

 

§ 4 Cookies

(1) In addition to the above-mentioned data, your use of our website may involve cookies being stored on your computer. Cookies are small text files that are stored on your hard disk and assigned to the browser you are using and through which the site that places the cookie (here us) certain information will flow. Cookies cannot be used to run programs or deliver viruses to your computer. They serve to make the website on the whole more user-friendly and efficient.

(2) Use of Cookies

1. This website uses the following types of cookies, whose scope and operation will be explained in the following:
   • Transient Cookies (see b)
   • Persistent Cookies (see c)
2. Transient cookies are deleted automatically when you close your browser. In particular, these include the session cookies. These save a so-called session ID, at which various requests from your browser can be allocated to the overall session. This allows your computer to be recognized again when you return to our site. Session cookies are deleted when you log out or close your browser.
3. Persistent cookies are automatically deleted after a specified duration, which may differ depending on the cookie. You can always delete cookies in your browser security settings.
4. You can configure your browser settings according to your wishes and, for example, the acceptance of third party cookies or reject all cookies. We would like to point out that you may not be able to use all functions of this website.
5. We use cookies to identify you for follow-up visits if you have an account with us. Otherwise, you may need to re-login for each visit.
6. The Flash Cookies will not be used by your browser, but by your flash plug-in. We continue to use HTML5 storage objects that are stored on your device. These objects store the necessary data regardless of the browser used and have no automatic expiration date. If you do not desire a processing of the flash cookies, you must install an appropriate add-on, e.g. "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or Adobe Flash-killer cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using private mode in your browser. We also recommend to manually delete your cookies and browser history on a regular basis.

§ 5 Needs-based data usage: Mediation orders from landlords, corporate and private clients

(1) In addition to the purely informative use of our website, we provide a variety of services. To do this, you need to specify additional personal data, which we use to provide the relevant performance benefits and for the above principles for data processing. This is done within the framework of:

• Mediation orders from landlords
• Mediation orders from companies for their employees
• Mediation orders from private customers

We collect only the data here that is necessary for the provision of our services.

(2) Partially we use to process your data from external service providers. These have been carefully selected by us and instructed, are within the framework of a written order processing arrangement in accordance with art. 28 DS-GVO bound by our instructions and are regularly inspected.

(3) We can also pass your personal data onto third parties if promotional campaign participations, competitions, contract conclusions or similar services are offered by us together with partners. More information on this can be obtained by entering your personal data or below in the description of the offer.

(4) To the extent that our service providers or third parties reside in a country outside of the European Economic Area (EEA), we will inform you about the consequences of this fact in the description of the offer.

 

§ 6 Web analysis services and tools

Google Analytics
This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses cookies that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server in the USA and stored there.

Google Analytics is used exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and excludes direct personal reference. The extension means that your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing is based on your consent in accordance with art. 6 para. 1 (a) GDPR and art. 25 para. TDDDG.

Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Further information on how Google Analytics handles user data can be found here.

Your data is transmitted to Google on the basis of an adequacy decision in accordance with Article 45 GDPR. This applies to US companies that are certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. You can find more information on this here if you enter "Google" in the search bar.

Google Ads (formerly Google Adwords)
We use "Google Ads", an online advertising program of Google LLC, 1600 Amphi-theatre Parkway, Mountain View, CA 94043, USA ("Google").

Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms into Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analyzing, for example, which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.

We use the Google Ads Remarketing function. This allows us to assign people who interact with our online offering to specific target groups in order to subsequently show them interest-based advertising in the Google advertising network (remarketing or retargeting).

Furthermore, the advertising target groups created with Google Ads Remarketing can be linked to Google's cross-device functions. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one device (e.g. cell phone) can also be displayed on another of your devices (e.g. tablet or PC).

If you have a Google account, you can object to personalized advertising here.

We also use Google conversion tracking. This allows Google and us to recognize whether the user has performed certain actions. For example, we can evaluate which buttons on our website were clicked how often and which pages were viewed or requested particularly frequently. This information is used to compile conversion statistics. We are informed of the total number of users who have clicked on our ads and what actions they have taken. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification purposes.

The use of Google Ads is based on your consent in accordance with art. 6 para. 1 (a) GDPR and art. 25 para. TDDDG. Further information can be found in Google's privacy policy.

Google Maps
We use the "Google Maps" plugin on our website, an online map service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

Google Maps is deactivated by default and does not transmit any data to Google by default when you visit the relevant page. If you would like to use Google Maps, you must either agree to the use of the service in the consent banner or click on the "Accept" button. Only after this click has been made is it possible to access the map and data is transferred to Google under the following conditions:

Google receives the information that you have accessed the corresponding subpage of our website. Your IP address will be transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out beforehand. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or needs-based design of the website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users about your activities on our website.

We use Google Maps if you have given your consent to this in accordance with art. 6 para. 1 (a) GDPR and art. 25 para. TDDDG. Consent is granted by clicking on the "Accept" button.

Further information on the purpose and scope of data collection and its processing by Google can be found in Google's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy.

Google PDF Viewer
We use the "Google PDF Viewer" plugin on our website, a PDF viewer from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). This enables us to display PDF files directly on the website.

The Google PDF Viewer is deactivated by default and does not transmit any data to Google by default when you visit the page in question. If you wish to use the Google PDF viewer, you must agree to the use of the service in the consent banner or click on the "Accept" button. Only after this click has been made is it possible to view the PDF in question and data is transferred to Google - you can find details on this in Google's privacy policy.

We only use the Google PDF Viewer if you have given your consent in accordance with art. 6 para. 1 (a) GDPR and art. 25 para. TDDDG. Consent is granted by clicking on the "Accept" button.

ImmoScout24
Offers from the ImmoScout24 platform are integrated on our website. This is operated by Immobilien Scout GmbH, Invalidenstraße 65, 10557 Berlin.

The plugin is deactivated by default and does not transmit any data to ImmoScout24 by default when you visit the relevant page. If you would like to use the plugin, you must agree to the use of the service in the consent banner or click on the "Accept" button. Only after this click has been made is it possible to access ImmoScout24 offers and data is transferred to ImmoScout24.

We use ImmoScout24 if you have given your consent in accordance with art. 6 para. 1 (a) GDPR and art. 25 para. TDDDG. Consent is granted by clicking on the "Accept" button.

Further information on data processing can be found in ImmoScout24's privacy policy.

§ 7 Digital Signature with eSignature

If we provide you with documents for digital signature, we use the eSignature tool for this purpose. The provider is DocuSign International (EMEA) Ltd, Attention: Privacy Team, 5 Hanover Quay, Ground Floor, Dublin 2, Republic of Ireland ("DocuSign"). DocuSign processes your e-mail address, your (qualified) digital signature via "DocuSign" and the data contained in the document provided for this purpose.
The legal basis for the processing of your personal data is our legitimate interest (Art. 6 (1) (f) GDPR) in formally simplifying and accelerating the process of legally signing documents by using an electronic signature.
To protect your data, we have concluded an order processing agreement with DocuSign in accordance with Art. 28 GDPR. Your data is stored on DocuSign servers located exclusively in Europe.
For details on data processing by DocuSign, please refer to DocuSign's privacy policy.

§ 8 Service ratings: Trustpilot

We participate in the evaluation process of the provider Trustpilot A/S, Pilestræde 58, 5, 1112 Copenhagen, Denmark. Trustpilot offers users the opportunity to rate our services.

Users who have used our services are asked to consent to the sending of the rating request. If the users have given their consent, they will receive an email from us with a link to the website trustpilot.com/review/www.wohnref.de for the purpose of evaluating our service after the conclusion of a contract. There you can rate our service on a voluntary basis. In order to ensure that users have actually used our services, we transmit the necessary data to Trustpilot with regard to the user and the service used (this includes the name, e-mail address and a reference number). This data is used solely to verify the authenticity and address of the user.

The legal basis for the processing of the user's data as part of the evaluation process is your consent in accordance with Article 6 para. 1 letter a) GDPR and Article 25 para. 1 TDDDG.

If you participate in this rating portal, your rating will be published on our website as well as on the websites of Trustpilot and its partners.

Further information on data protection on the Trustpilot website can be found in Trustpilot's privacy policy.

We also integrate the Trustpilot plugin into our website. The plugin is deactivated by default and does not transmit any data to Trustpilot by default when you visit the relevant page. If you would like to use the plugin, you must click on the "Accept" button. Only after this click has been made is it possible to use the plugin and data will be transmitted to Trustpilot.

We use the Trustpilot plugin if you have given your consent in accordance with art. 6 para. 1 (a) GDPR and art. 25 para. TDDDG. Consent is granted by clicking on the "Accept" button.

Further information on this can also be found in Trustpilot's privacy policy.

§ 9 Revocation or objection against the processing of your data

(1) If you have given consent for the processing of your data, you can revoke this at any time. Such a revocation affects the admissibility of the processing of your personal data after you have spoken to us.

(2) If we base the processing of your personal data on the balance of interests, you can object to the processing. This is the case, in particular, if the processing is not required for the performance of a contract with you, which is represented by us in the following description of the functions. In exercising such a contradiction, we ask for an explanation of the reasons why we should not process your personal data. In the case of your justified opposition, we will examine the situation and are either stop or adjust the data processing or inform you of our compelling legitimate grounds, on the basis of which we will continue the processing.

(3) You can, of course, object to the processing of your personal data for purposes of advertising and data analysis at any time. You can send your objection to advertising to the following contact details:

Immobilien-Service in Franken GmbH
Hallplatz 15-19 / 2^nd floor
D-90402 Nuremberg, Germany
Phone: +49(0) 911 19430
+49(0) 911 2418471
E-mail: info@mitwohnzentrale-franken.de 

§ 10 Closing remarks

Our business operation requires that data is collected and processed. Where data collection and processing take place, data protection and data security must be ensured. This is not only legal requirement, but a vested concern of ours.

If you have any questions or suggestions on the subject of data protection with respect to our services, please feel free to contact us at the above contact details (please refer to section 1).

§ 11 Analyzing tool

We use an internal analyzing tool for tracking purposes, which analyses webserver logfiles only. No data will be transferred to third parties. The evaluation of this data will only be processed through us. This analyzing tool is used in order to continuously design and optimize our website and make sure it meets the demands of the internet community. Furthermore it is used as a statistic tool to measure the usage of our website in order to adapt our website services.

In this context, the tool generates pseudonymous usage profiles. Also cookies will be used (see also paragraph 4).
For the above mentioned internal purposes the following data collected by the analyzing tool and the cookie will be analyzed by us:

• Browser type and version,
• Operating system,
• Referrer Url (pre-visited page),
• Hostname of the accessing computer (IP address),
• Date and time of the server access

---

Transparency information for customers, applicants and other data subjects

We would like to provide you with an overview of processing of your personal data by us and your rights from the law on data protection with the following information. The data that are processed in detail and how they are used essentially depends on the basis for our contact or the services agreed. Therefore, not all parts of this information will apply to you.

1. Who is the controller for the processing activities and who may you turn to?

The controller is

ISF Immobilien-Service in Franken GmbH, represented by its managing directors Manuela Zollner and Thomas Basel, Hallplatz 15-19, D-90402 Nuremberg

Phone: 0911/19430
Telefax: 0911/223297
E-Mail: info@mitwohnzentrale-franken.de


2. What data do we use and where do they come from?

We process personal data that we receive from our customers or other data subjects, e.g. their authorised representatives, prospects, people requesting information, etc., in the scope of our business activity.

This includes, for example, personal data (name, contact details/address, phone, fax, email, date/place of birth, gender), order data, data from meeting our contractual obligations, advertising and sales data, as well as other data comparable to the categories named.

We further process personal data that results beforehand from personal, phone or written contact initiated by you or by us, e.g. information on the transmission channel (phone, email, fax, internet).

We also process personal data that we have admissibly acquired from publicly accessible sources (e.g. commercial register, press, media, internet) and are allowed to process.

3. For what purpose do we process your data (purpose of processing) and what is the legal basis?

We process the personal data under observation of the provisions of the GDPR, the Federal Data Protection Act (Bundesdatenschutzgesetz; BDSG) as well as any other relevant laws.

a) The preparation or execution of our contractual relationships (point (b) of Article 6(1) GDPR)

Data are processed for rendering our services in the scope of performance of our contracts with our customers, or performance of pre-contractual measures that are taken upon your request. The purposes of data processing are mainly according to the contractual object and may, among other things, comprise demand analyses and consulting.

b) Within the scope of consideration of interests (point (f) of Article 6(1) GDPR)

As far as is necessary, we will process your data beyond the actual performance of the contract to protect our legitimate interests.

Examples:
Advertising, review and optimisation of procedures for demand analysis for the purpose of direct customer contact, establishment of legal claims and defences in legal disputes, ensuring IT security and our IT system, measures for the security of buildings and facilities (e.g. admission controls), prevention and investigation of criminal offences, measures for business control and further development of services and products.

c) Based on legal specifications (point (c) of Article 6(1) GDPR)

We are subject to various statutory obligations, i.e. statutory requirements. The purposes of processing include, for example, meeting tax control and notification obligations.

d) Based on your consent (point (a) of Article 6(1) GDPR)

Where you have given your consent to processing of your personal data for specific purposes (e.g. forwarding of your application documents, handover of your calling card, consent to newsletter dispatch), such processing is lawful based on your consent. You may withdraw consent given at any time for the future. This declaration is not bound to any specific form. 

4. Who will receive my data?

Within our company, only those offices that require your data in order to enable us to meet our contractual and statutory obligations will be given access to them. Service providers and vicarious agents deployed by us may also receive data for these purposes if they observe confidentiality and our instructions under data protection law.
In light of forwarding outside of our company, we observe that we are obligated to secrecy concerning any data of our customers and potential customers of which we gain knowledge. We must only pass on information about you if we are obligated to issue information by statutory provisions, or if you have consented to it. The processors charged by us must guarantee equivalent compliance with confidentiality and the specifications of the GDPR. This is specifically the case for print service providers, service providers for data carrier destruction, EDP/IT support and maintenance service providers, scanning service providers, payment transaction service providers, legal counsels and tax advisors.

5. Are any data transmitted to a third country or international organisation?

Data transfer to any countries outside of the EU or EEA (third states) does not take place.

6. For what period are your data stored?

We process and store your data for as long as this is necessary to meet our contractual or statutory obligations. If the data are no longer required to meet contractual or statutory obligations, they will be regularly deleted, except if their temporary further processing is required to meet retention obligations under commercial and tax law from the Commercial Code (Handelsgesetzbuch; HBG) and the Tax Code (Abgabenordnung; AO). The time limits stipulated there for archiving or documentation are usually between two and ten years. In such cases, processing as such is restricted after the end of the contractual purpose so that only the purpose of archiving from the exemplary laws named can be achieved.
Furthermore, there may be individual retention interests that take priority over any erasure obligations. In such cases, processing as such is also restricted after the end of the contractual purpose so that only the purpose of archiving can be achieved anymore. One example is preserving evidence within the context of the statutory expiration provisions. According to Sections 195 et seqq. German Civil Code, these expiration periods may be up to 30 years, with the regular period of expiration being 3 years.

7. Processing activities within the context of requests for information in accordance with Article 15 GDPR

The purpose of processing of your personal data in cases where you demand information from us about the personal data stored concerning you in accordance with Article 15 GDPR is meeting your claim to information. We store the following data from you for the purpose of providing this information: First name, surname, email address and address.
Processing of such personal data takes place to meet a legal obligation from Article 15 GDPR, i.e. the obligation to provide information you have requested from us. The legal basis for this is point (c) of Article 6(1) GDPR.

We submit your data to our data protection officer or a lawyer charged by us in this matter in order to process and respond to your request for information together with him. There will be no further transfer of data to third parties. Data transfer to any countries outside of the EU or EEA (third states) does not take place either.
Within the context of requests for information, we will store your personal data only for as long as this is required to perform the above purpose of processing.

8. Job offers and unsolicited applications

Protection of your personal data in the scope of the application process is important to us. The following information applies to applications that are sent to us by email or mail.

The purpose of processing of your personal data is the verification of possible employment in our company (applicant selection) based on your application documents (applicant information). We process the data submitted by you for the following purpose: Personal data (first and last names, date of birth, place of birth, address), communication data (phone no., mobile phone no., email address), data about training (school, vocational training, civilian service/military service, studies, postgraduate studies), details on your career to date (training and work references) and an application photograph.
The legal basis for processing of your data is your consent that you have conclusively given to us by sending your application documents, point (a) of Article 6(1) GDPR. Second, we process these data to make a decision on founding an employment based on Section 26 BDSG-revised.
We will use the personal data submitted by you only for processing your application for the offered job. Your details will only be disclosed to those of our employees who are involved in the application process. All employees charged with data processing are also obligated to keep your data confidential. We will not pass your personal data on to any third parties without your advance explicit consent to passing on of data, or if we are obligated to do so based on statutory provisions and/or authority or court order.

This shall not apply if any statutory provisions oppose erasure, further storage is necessary for the purpose of evidence or if you have explicitly consented to longer storage.

Your application data are provided freely. You may revoke your consent at any time. If you revoke your consent to processing of your personal data, we will erase the application information received from you from our applicant database. If any retention obligations apply, or if there is a legitimate interest in retention, we will restrict processing until the data to be retained are erased.

9. Your data protection rights

Every data subject has the right to information in accordance with Article 15 GDPR, the right to rectification in accordance with Article 16 GDPR, the right of erasure in accordance with Article 17 GDPR, the right to restriction of processing in accordance with Article 18 GDPR, the right to objection from Article 21 GDPR and the right to data portability from Article 20 GDPR. If you make use of your rights named above, we will check if the statutory conditions for this are met. Apart from this, you have the right to lodge a complaint with the Bavarian state office for data protection (Bayerisches Landesamt für Datenschutzaufsicht).

You may revoke your consent granted to us for processing of personal data at any time. This shall also apply to any declarations of consent that were given to us before the application of the GDPR, i.e. before 25 May 2018. Please note that the revocation will only be effective for the future. Processing that took place before the revocation is not affected by this..

10. Is there any obligation for you to provide data?

Within the scope of our business relationships, you need to provide such personal data that are needed to found, execute or terminate the business relationship, and to meet the connected obligation, or the collection of which is required by law. Without these data, we will usually be unable to conclude, execute and complete a contract with you.

11. Final matters

Our business operation requires the recording and processing of personal data. Where data recording and processing take place, data protection and data security must be ensured. This is not only a legal requirement, but also important to us.

If you desire any information that this data protection statement does not contain, or if you desire any further information on a specific item, please contact us on the above contact details.