Data Protection Statement

With this statement, we as Data Managers under data protection laws inform you about the processing of your personal data on our websites as well as your rights as a user. We take the protection of your data very seriously and adhere to all valid provisions and laws pertaining to data protection law in the Federal Republic of Germany. In doing so, we strictly collect, process and use your personal details only once you have granted your consent to this or this is permitted by law.

  1. Managers and general information
  2. What are personal data?
  3. Business purpose of the Immowelt Holding AG
  4. To what end do we generally process your personal data?
  5. Place of processing
  6. Are your data passed on to other companies of Immowelt Holding AG or to third parties?
  7. How long are your data stored here with us?
  8. What data are automatically collected via our website?
  9. When do we use technically required Cookies on the website?
  10. What services do we deploy for tracking and analysis on websites?
  11. Social Networks
  12. Other services
  13. What are my rights according to the GDPR?

1. Managers and general information

Your data are processed by:

Immowelt Holding AG
Nordostpark 3-5
90411 Nuremberg
Germany

T +49 911 520 25-0
F +49 911 520 25-25
info@immowelt-group.com
The contact details of our company Data Protection Officers are: datenschutz@immowelt-group.com.

The office is a service provider according to the German Telemedia Act (TMG) and a Manager according to the General Data Protection Regulation (GDPR). The office is also meant when wording such as “we” or “us” is used.

We regret that persons under the age of 18 are not permitted to use our services.

2. What are personal data?

Personal data are all information that refers to an identified or identifiable natural person (person concerned). A person concerned can be identified by means of personal data. These include, for example, name, address, e-mail address, telephone number or an IP address assigned to you by your Internet provider. Information that cannot help to establish your identity (anonymous data) is not defined as personal data.

3. Business purpose of the Immowelt Holding AG

Through their portals, software products and services, the companies of the Immowelt Holding AG (referred to hereinafter as Immowelt Group) offer comprehensive services regarding  real estate search and marketing, real estate marketing, real estate financing, removals and digital marketing. We provide information about the companies and portals that are part of the Immowelt Group on our page immowelt-group.com. In addition, we offer information about partners, career opportunities, our social engagement as well as our press and public relations activities.

4. To what end do we generally process your personal data?

We process your personal data according to the legal stipulations of the General Data Protection Regulation (short form: GDPR). It is always permissible for us to store and process data when any of the following requirements has been met:

  • You have granted us your consent (Art. 6 para. 1 a GDPR)
  • For the fulfilment of contractual obligations (Art. 6 para. 1 b GDPR)
  • For the fulfilment of statutory obligations (Art. 6 para. 1 c GDPR)
  • Within the context of the balancing of interests (Art. 6 para. 1 f GDPR)

5. Place of processing

We ourselves will not transmit your personal data to countries outside the European Economic Area (“EEA”), except in cases where this is permissible according to the GDPR. In order to guarantee your data protection rights also in the context of these data transmissions, we draw on the standard contractual clauses of the EU Commission when formulating contractual relations with recipients in third countries, pursuant to Art. 46 para. 2 letter c GDPR. These can be retrieved at any time at 
http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:EN:PDF.
For the USA, by resolution dated 12/07/2016 the European Commission decided that an adequate level of data protection exists under the regulations of the EU-U.S. Privacy Shield (resolution on adequacy, Art. 45 GDPR). Further information – including on the certification of service providers that we use – can be obtained at https://www.privacyshield.gov. We exclusively use US service providers who are certified according to the EU-U.S. Privacy Shield or with whom we have agreed standard contractual clauses according to Art. 46 para. 2 c) GDPR.

6. Are your data passed on to other companies of Immowelt Holding AG or to third parties?

6.1. Immowelt Holding AG

As far as you have provided us with personal data, we will use these only in order to respond to your queries, execute contracts that we have signed with you, and for the purpose of technical administration. Your personal data will be forwarded or transmitted to third parties only in the event that this is necessary for the performance of the service that you have procured or you have granted your consent beforehand.
Taking the form of Immowelt Holding AG, we are associated with other companies as part of an affiliated group. Provided that the statutory requirements of permissible data transmission are complied with, your personal data may be made accessible to other members of Immowelt Holding AG. You will find a list of member companies here https://www.immowelt-group.com/datenschutz/group/.

6.2. Third parties

Provided that we are obliged by law to do so or this is allowed under data protection law, we transmit personal data to authorities, for example the police or the public prosecutor’s office (Art. 6 para. 1 letter c GDPR). The forwarding of these data takes place on the basis of our justified interest in the combating of misuse, the prosecution of criminal acts and in the securing, assertion and implementation of claims provided that your rights and interests in the protection of your personal data do not predominate, Art. 6 para. 1 letter f GDPR.

7. How long are your data stored here with us?

We process and store your personal data for as long as this is required for the fulfilment of our contractual and statutory obligations. As long as our business relationship with you continues we will not unilaterally delete your data. If your data are no longer needed for the fulfilment of contractual or statutory obligations, they will be deleted, unless further storage is required for the fulfilment of retention obligations under commercial and tax law.

8. What data are automatically collected via our website?

Upon your visit to an Internet page, information concerning IP address, referring URL, date, time, browser version and operating system used is stored in the server-specific log files. These data are needed in order to transmit an Internet page. They will not be assigned to any individual person.

We use this information exclusively for the purposes of technical administration of our website and for the deflection of illicit acts in connection with our website. We reserve the right to examine these log data subsequently if, on the basis of specific indications, justified suspicion of an illicit act prevails. As far as personal data are processed in the context of this operation, we will do this solely in order to safeguard our justified interest concerning the deflection of illicit acts in connection with our website. 

The legal basis for this is Art. 6 para. 1 f) GDPR. In the process, personal data will be stored for a maximum duration of 40 days, unless any indications of illicit use are present. The justified interests are constituted by the protection of the provided service and the functionality of corporate processes. You have the right to oppose this data processing at any time, for reasons that arise from your particular situation. In this case, we will process the data only if our reasons that are compellingly worthy of protection outweigh your reasons, or if the processing serves the purpose of the assertion, exercising or defence of legal claims.

9. When do we use technically required Cookies on the website?

We use a session cookie and additionally permanent cookies with a variable run time.

A session cookie is used only for the duration of your visit to our websites, a so-called session. We keep this session open until you have finished making your entries in creating your ad.

If you close your browser, the session will terminate immediately. Otherwise, it will lapse automatically after 20 minutes of inactivity. All data that were held in the cookie during this session will be irretrievably deleted.

You can view all existing cookies in your browser at any time and delete them as you desire. Additionally, you can block the use of cookies in your browser. Legal basis for the data collection: Art. 6 para. 1 b) GDPR. All these technically required cookies are required for contract implementation. If this information is not stored, this will have the consequence that the contractual service cannot be performed to the full extent.

10. What services do we deploy for tracking and analysis on websites?

We use various services for website analysis and tracking on our websites. We explain them to you in more detail in the following. The legal basis for this form of data collection is Art. 6 para. 1 f) GDPR. Our justified interest is constituted by the optimisation of our services and the marketing of our services. You have the right to oppose this data usage in accordance with Art. 21 GDPR.

The inclusion of external tracking services means that data will be transmitted to recipients in the USA in individual cases when this website is used. In these cases, we take care to ensure that the data transfer between the EU and the USA has been legitimised under data protection law. The data transfer is based on certification through the EU-US Privacy Shield, according to which American organisations bind themselves to a catalogue of data protection principles. With regard to a transfer of this kind, the European Commission has attested the adequacy of the data protection level by resolution of 12 July 2016, see https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016D1250&from=EN . Where there is no Privacy Shield certification, we have agreed standard contractual clauses according to Art. 46 para. 2 c) GDPR with our service providers.

10.1. Google Analytics

Our websites use Google Analytics, a Web analysis service from Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on the user’s computers and enable an analysis of how you use the website. The information generated by means of the cookie concerning users’ use of our websites is generally transmitted to a server of Google in the USA and stored there. Due to the activation of IP anonymisation on our websites, however, within the Member States of the European Union or in other treaty states of the European Economic Area the IP address of users will be shortened beforehand by Google in order to rule out any direct personal reference.

On behalf of our websites, Google will use this information in order to evaluate the use of the websites by the users, in order to compile reports concerning website activities and in order to perform other services associated with the website use and Internet use in respect of the website operator. The IP address transmitted by the user’s browser in the context of Google Analytics will not be merged with other data in Google’s possession. 

You can prevent the storage of cookies by making a corresponding adjustment in your browser software; however, we point out that, in this case, you may not be able to use all functions of this website to the full extent. In addition, you can prevent the recording of the data generated by means of the cookie and relating to your use of the website (including your IP address) by 

Google as well as the processing of these data by Google by downloading and installing the browser plugin available through this link.

If you visit our site via a mobile terminal (smartphone or tablet, for example), you can also prevent the recording by Google Analytics by clicking on the following link. In the process, an opt-out cookie will be deposited on your device and will prevent the future recording of your data when visiting these websites. If you delete your cookies, you will need to click on this link again.

You will find more detailed information on conditions of use and data protection at http://www.google.com/analytics/terms/de.html or respectively at https://policies.google.com/?hl=en&gl=en.

10.2. Tealium AudienceStream

We use Tealium Audience Stream, a service of Tealium Inc., 11085, Torreyana Road, San Diego, CA 92121, USA, via which data are collected and stored on our website which can be used to compile usage profiles under the use of pseudonyms. 

Among others, the following items of information are collected for this purpose: 

  • Usage / click behaviour (sites visited, services used, etc.)
  • Chronological measurements (time and duration of the website visit, etc.)
  • Device properties (resolution, operating system, browser version, etc.)

In order to improve your usage experience, we link the data collected from across all devices on which you have signed in via various websites and other services that we offer.

We use this information in order to adapt parts of the websites according to your needs and thus configure your usage of the website according to specific needs automatically and in real time. 

The pseudonymised usage profiles will not be merged with personal data concerning the bearer of the pseudonym without consent, which is provided separately. The IP address transmitted by your browser will also not be merged with the usage profiles.

In order to compile the usage profiles cookies or, in the case of mobile terminals, similar technologies are used. The information generated by means of the cookie concerning your use of this website is stored exclusively in Germany.

You can prevent data collection by Tealium AudienceStream by clicking on the following link. In the process, an opt-out cookie will be deposited on your device and will prevent the future recording of your data when visiting these websites. If you delete your cookies, you will need to click on this link again.

11. Social Networks

You will also find us on social networks of third-party companies, such as Facebook or Twitter. Additionally, we have also integrated individual functions of these networks into our online services. You can use the two of them only once you have signed up and logged into the respective social network, however. Please note that the respective company’s terms of usage and data protection apply for the usage of the respective social network, and that we have no influence on them. However, we gladly explain to you how such networks process your personal data in this context:

11.1. Facebook

We have integrated components from the company Facebook on this website. Facebook is a social network.

A social network is a social meeting-point operated on the Internet, an online community that generally allows users to communicate with one another and to interact in the virtual space. A social network can serve as a platform for the exchange of opinions and experiences or it allows the Internet community to provide personal or business-related information. Among other things, Facebook enables users of the social network to create private profiles, upload photos and establish a network via friend requests.

The operating company of Facebook is Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If data subjects live outside the USA or Canada, the Data Manager for the processing of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Every time a user retrieves any of the individual pages of this website, which is operated by us and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Facebook component to download a display of the corresponding Facebook components from Facebook. A full overview of all Facebook plug-ins can be retrieved from https://developers.facebook.com/docs/plugins/?locale=en_EN. Within the scope of this technical process Facebook gains knowledge of which specific sub-page of our website is being visited by the data subject.

Provided that the data subject is simultaneously logged in on Facebook, on every retrieval of our website by the data subject and during the whole duration of the respective stay on our website, Facebook recognises which specific sub-page of our website the data subject visits. This information is gathered by means of the Facebook component and allocated by Facebook to the respective Facebook account of the data subject. If the data subject activates one of the Facebook buttons integrated into our website, the “Like” button for example, or if the data subject writes a comment, Facebook allocates this information to the personal Facebook user account of the data subject and stores these personal data.

Via the Facebook component, Facebook obtains information on the data subject’s behaviour when visiting our website whenever the data subject is simultaneously logged in on Facebook at the time of retrieving our website; this takes place regardless of whether the data subject clicks on the Facebook component or not. In the event that the data subject does not desire such transmission of this information to Facebook, the data subject can prevent transmission by logging out of their Facebook account before retrieving our website.

The guideline published by Facebook, which can be retrieved from https://de-de.facebook.com/about/privacy/ provides information about the collection, processing and usage of personal data by Facebook. The settings options that Facebook offers for safeguarding the data subject’s privacy are also explained there. Additionally, various applications are available that enable users to suppress data transmission to Facebook. Such applications can be used by the data subject in order to suppress data transmission to Facebook.

11.2. Google+

We have integrated the Google+ button as a component on this website. Google+ is a so-called social network. A social network is a social meeting-point operated on the Internet, an online community that generally allows users to communicate with one another and to interact in the virtual space. A social network can serve as a platform for the exchange of opinions and experiences or it allows the Internet community to provide personal or business-related information. Among other things, Google+ enables users of the social network to create private profiles, upload photos and establish a network via friend requests. The operating company of Google+ is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Every time a user retrieves any of the individual pages of this website, which is operated by us and on which a Google+ button has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Google+ button to download a display of the corresponding Google+ button from Google. Within the scope of this technical process Google gains knowledge of which specific sub-page of our website is being visited by the data subject. More precise information about Google+ can be retrieved from developers.google.com/+/. Provided that the data subject is simultaneously logged in on Google+, on every retrieval of our website by the data subject and during the whole duration of the respective stay on our website, Google recognises which specific sub-page of our website the data subject visits. This information is gathered by means of the Google+ button and allocated by Google to the respective Google+ account of the data subject.

If the data subject activates one of the Google+ buttons integrated into our website and thereby submits a Google+1 recommendation, Google allocates this information to the personal Google+ user account of the data subject and stores these personal data. Google stores the Google+1 recommendation of the data subject and makes it publicly accessible in compliance with the terms accepted by the data subject in this regard. A Google+1 recommendation submitted on the website by the data subject will subsequently be stored and processed with other personal data, such as the name of the Google+ account used by the data subject and the photo connected to it, in other Google services, for example the search engine results of the Google search engine, the Google account of the data subject or in other places, for example on websites or in connection with advertisements. Additionally, Google is able to link the visit to this website with other personal data stored with Google. Google further records these personal data with the purpose of improving or optimising the various services of Google.

Via the Google+ button, Google obtains information on the data subject’s behaviour when visiting our website whenever the data subject is simultaneously logged in on Google+ at the time of retrieving our website; this takes place regardless of whether the data subject clicks on the Google+ button or not.

In the event that the data subject does not desire transmission of these personal data to Google, the data subject can prevent such transmission by logging out of their Google+ account before retrieving our website.

You can retrieve further information and the applicable data protection clauses for Google from https://www.google.de/intl/de/policies/privacy/. Further information from Google about the Google+1 button can be retrieved from https://developers.google.com/+/web/buttons-policy.

11.3. Instagram

We use components of the service Instagram. Instagram is a service that can be qualified as an audiovisual platform and enables users to share photos and videos and additionally to further process such data in other social networks. The operator of Instagram is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA. Through every retrieval of any of the individual pages of this website on which an Instagram component (Insta-Button) has been integrated, Instagram gains knowledge of which specific sub-page of our website is being visited by the data subject. Provided that you are simultaneously logged in on Instagram, with every retrieval of our website and during the whole duration of the respective stay on our website, Instagram recognises which specific sub-page has been visited. This information is also gathered by means of the Instagram component and allocated by Instagram to your Instagram account. If you activate any of the Instagram buttons integrated into our website, the data and information transmitted with it will be allocated to the personal Instagram user account and stored and processed by Instagram. Via the Instagram component, Instagram obtains information that you have visited our website whenever you are simultaneously logged in on Instagram at the time of retrieving our website; this takes place regardless of whether you click on the Facebook component or not. In the event that you do not desire such transmission of this information to Instagram, you can prevent transmission by logging out of your Instagram account before retrieving our website. You can retrieve further information and the applicable data protection clauses for Instagram from https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

11.4. LinkedIn

We have integrated components from the LinkedIn Corporation on this website. LinkedIn is an Internet-based social network that enables users to connect with existing business contacts as well as to make new business contacts. LinkedIn has more than 400 million registered users across more than 200 countries. This makes LinkedIn currently the biggest platform for business contacts and one of the most-visited websites in the world.

The operating company of LinkedIn is the LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland is responsible for data protection matters outside the USA.

On every individual retrieval of our website, which is equipped with a LinkedIn component (LinkedIn plug-in), this component prompts the browser used by the data subject to download a corresponding display of the component from LinkedIn. More information about LinkedIn plug-ins can be retrieved from https://developer.linkedin.com/plugins. Within the scope of this technical process LinkedIn gains knowledge of which specific sub-page of our website is being visited by the data subject. Provided that the data subject is simultaneously logged in on LinkedIn, on every retrieval of our website by the data subject and during the whole duration of the respective stay on our website, LinkedIn recognises which specific sub-page of our website the data subject visits. This information is gathered by means of the LinkedIn component and allocated by LinkedIn to the respective LinkedIn account of the data subject. If the data subject activates a LinkedIn button integrated into our website, LinkedIn allocates this information to the personal LinkedIn user account of the data subject and stores these personal data.

Via the LinkedIn component, LinkedIn obtains information on the data subject’s behaviour when visiting our website whenever the data subject is simultaneously logged in on LinkedIn at the time of retrieving our website; this takes place regardless of whether the data subject clicks on the LinkedIn component or not. In the event that the data subject does not desire such transmission of this information to LinkedIn, the data subject can prevent transmission by logging out of their LinkedIn account before retrieving our website.

Under https://www.linkedin.com/psettings/guest-controls, LinkedIn offers the opportunity to unsubscribe from e-mail messages, SMS messages and targeted advertisements as well as to manage advertisement settings. In addition, LinkedIn uses services from partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame, which may deposit cookies. Such cookies can be refused at https://www.linkedin.com/legal/cookie-policy. The applicable data protection clauses for LinkedIn can be retrieved from https://www.linkedin.com/legal/privacy-policy. The cookie policy for LinkedIn can be retrieved from https://www.linkedin.com/legal/cookie-policy.

11.5. Pinterest

We have integrated components from Pinterest Inc. on this website. Pinterest is a so-called social network. A social network is a social meeting-point operated on the Internet, an online community that generally allows users to communicate with one another and to interact in the virtual space. A social network can serve as a platform for the exchange of opinions and experiences or it allows the Internet community to provide personal or business-related information. Among other things, Pinterest enables users of the social network to publish (“pin”) image collections and individual images as well as descriptions to virtual pinboards, which can then be shared in turn (so-called re-pinning) or commented on by other users.

The operating service of Pinterest is Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA. Every time a user retrieves any of the individual pages of this website, which is operated by us and on which a Pinterest component (Pinterest plug-in) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Pinterest component to download a display of the corresponding Pinterest component from Pinterest. More information about Pinterest can be retrieved from https://pinterest.com/ . Within the scope of this technical process Pinterest gains knowledge of which specific sub-page of our website is being visited by the data subject. Provided that the data subject is simultaneously logged in on Pinterest, on every retrieval of our website by the data subject and during the whole duration of the respective stay on our website, Pinterest recognises which specific sub-page of our website the data subject visits. This information is gathered by means of the Pinterest component and allocated by Pinterest to the respective Pinterest account of the data subject. If the data subject activates a Pinterest button integrated into our website, Pinterest allocates this information to the personal Pinterest user account of the data subject and stores these personal data.

Via the Pinterest component, Pinterest obtains information that the data subject has visited our website whenever the data subject is simultaneously logged in on Pinterest at the time of retrieving our website; this takes place regardless of whether the data subject clicks on the Pinterest component or not. In the event that the data subject does not desire such transmission of this information to Pinterest, the data subject can prevent transmission by logging out of their Pinterest account before retrieving our website.

The data protection policy published by Pinterest, which can be retrieved from https://policy.pinterest.com/de/privacy-policy provides information about the collection, processing and usage of personal data by Pinterest.

11.6. Snapchat

Snapchat is an instant messaging service for mobile terminals of the company Snap Inc. with its head office in Los Angeles, CA, USA. The services makes it possible to send messages, photos and videos that are visible to the recipient for only a few seconds. Additionally, the Snapchat application includes the field “Discover” for editorial content from media partners. We publish our own content in the form of videos, photos and text on Snapchat Discover every day. The content is uploaded to a content management system provided by Snap. At the same time, Snap provides us with aggregated, non-person-specific usage data concerning every publication. These include, among others, the number of retrievals of every publication, the usage duration of all messages and the demographics of the users. There is no integration of Snapchat elements on our pages that involves transmission of data.

In addition, Snapchat offers its users the opportunity to publish so-called “Stories” outside of “Discover”. Stories are sequences of short vertical videos and photos that are visible to all friends connected in the app. We also publish Stories on an irregular basis as a supplement to the daily Discover content. These are visible to all users who have added us as a contact in the Snapchat application.

The applicable data protection clauses can be retrieved from https://www.snap.com/de-DE/privacy/privacy-policy/.

11.7. Twitter

We have integrated components from Twitter on this website. Twitter is a multi-lingual, publicly accessible microblogging service on which users can publish and disseminate so-called Tweets, which are short messages that are limited to 280 characters. These short messages are visible to everyone, so not only to persons registered on Twitter. However, the Tweets are also displayed to the so-called Followers of the respective user. Followers are other Twitter users who follow a user’s Tweets. Moreover, Twitter enables a wide audience to be addressed via hashtags, links or re-Tweets. The operating company of Twitter is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

Every time a user retrieves any of the individual pages of this website, which is operated by us and into which a Twitter component (Twitter button) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Twitter component to download a display of the corresponding Twitter component from Twitter. More information about Twitter buttons can be retrieved from https://help.twitter.com/en/safety-and-security#ads-and-data-privacy. Within the scope of this technical process Twitter gains knowledge of which specific sub-page of our website is being visited by the data subject. The purpose of integrating the Twitter component is to enable our users to further disseminate the content of this website, to publicise this website in the digital world and to increase our visitor numbers.

Provided that the data subject is simultaneously logged in on Twitter, on every retrieval of our website by the data subject and during the whole duration of the respective stay on our website, Twitter recognises which specific sub-page of our website the data subject visits. This information is gathered by means of the Twitter component and allocated by Twitter to the respective Twitter account of the data subject. If the data subject activates any of the Twitter buttons integrated into our website, the data and information transmitted with it will be allocated to the personal Twitter user account of the data subject and stored and processed by Twitter.

Via the Twitter component, Twitter obtains information on the data subject’s behaviour when visiting our website whenever the data subject is simultaneously logged in on Twitter at the time of retrieving our website; this takes place regardless of whether the data subject clicks on the Twitter component or not. In the event that the data subject does not desire such transmission of this information to Twitter, the data subject can prevent transmission by logging out of their Twitter account before retrieving our website.

The applicable data protection clauses of Twitter can be retrieved from https://twitter.com/privacy?lang=en.

11.8. Xing

We have integrated components from Xing on this website. Xing is an Internet-based social network that enables users to connect with existing business contacts as well as to make new business contacts. In Xing, individual users can create their own personal profile. Companies can create company profiles or publish job offers on Xing, for example. The operating company of Xing is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. Every time a user retrieves any of the individual pages of this website, which is operated by the service provider on our behalf and on which a Xing component (Xing plug-in) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Xing component to download a display of the corresponding Xing component from Xing. More information about Xing plug-ins can be retrieved from dev.xing.com/plugins. Within the scope of this technical process Xing receives information regarding which specific sub-page of our website is being visited by the data subject.

Provided that the data subject is simultaneously logged in on Xing, on every retrieval of our website by the data subject and during the whole duration of the respective stay on our website, Xing recognises which specific sub-page of our website the data subject visits. This information is gathered by means of the Xing component and allocated by Xing to the respective Xing account of the data subject. If the data subject activates a Xing button integrated into our website, the “Share” button for example, Xing allocates this information to the personal Xing user account of the data subject and stores these personal data.

Via the Xing component, Xing obtains information on the data subject’s behaviour when visiting our website whenever the data subject is simultaneously logged in on Xing at the time of retrieving our website; this takes place regardless of whether the data subject clicks on the Xing component or not. In the event that the data subject does not desire such transmission of this information to Xing, the data subject can prevent transmission by logging out of their Xing account before retrieving our website. The data protection clauses published by Xing, which can be retrieved from https://privacy.xing.com/de/datenschutzerklaerung, provide information about the collection, processing and usage of personal data by Xing. Additionally, Xing has published data protection information for the XING share button at https://www.xing.com/app/share?op=data_protection.

11.9. YouTube

We have integrated components from YouTube on this website. YouTube is an Internet video portal that enables video publishers to post video clips free of charge and allows other users to view, rate and comment on these clips, likewise free of charge. YouTube permits the publication of all kinds of videos, which is why complete film and television broadcasts as well as music videos, trailers and users’ self-produced videos can be retrieved via the Internet portal. The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Every time a user retrieves any of the individual pages of this website, which is operated by the service provider on our behalf and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective YouTube component to download a display of the corresponding YouTube component from YouTube. More information about YouTube can be retrieved from https://www.youtube.com/yt/about/de/. Within the scope of this technical process YouTube and Google receive information regarding which specific sub-page of our website is being visited by the data subject.

Provided that the data subject is simultaneously logged in on YouTube, on retrieval of a sub-page that contains a YouTube video, YouTube recognises which specific sub-page of our website the data subject visits. This information is gathered by YouTube and Google and allocated to the respective YouTube account of the data subject. Via the YouTube component, YouTube and Google information on the data subject’s behaviour when visiting our website whenever the data subject is simultaneously logged in on YouTube at the time of retrieving our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. In the event that the data subject does not desire such transmission of this information to YouTube and Google, the data subject can prevent transmission by logging out of their YouTube account before retrieving our website.

The data protection clauses published by YouTube, which can be retrieved from https://policies.google.com/privacy?hl=en&gl=en, provide information about the collection, processing and usage of personal data by YouTube and Google.

On smartphones and tablets, the abovementioned services are often not realised via plug-ins but via a device-internal “share” function. Depending on the device’s settings, information may also be given to other social media service providers. Please consult your device information for details on this subject.

12. Other services

We use further services on our websites that we would like to explain to you in more detail in the following. The legal basis for this form of data collection is Art. 6 para. 1 f) GDPR. Our justified interest is constituted by the optimisation of our services and the marketing of our services. You have the right to oppose this data usage in accordance with Art. 21 GDPR. 

The inclusion of external tracking services means that data will be transmitted to recipients in the USA in individual cases when this website is used. In these cases, we make sure that the data transfer between the EU and the USA has been legitimised under data protection law. The data transfer is based on certification through the EU-US Privacy Shield, according to which American organisations bind themselves to a catalogue of data protection principles. With regard to a transfer of this kind, the European Commission has attested the adequacy of the data protection level by resolution of 12 July 2016, see https://eur-lex.europa.eu/legal-content/en/TXT/PDF/?uri=CELEX:32016D1250&from=EN. Where there is no Privacy Shield certification, we have agreed standard contractual clauses according to Art. 46 para. 2 c) GDPR with our service providers.

12.1. Tealium Tag Management System

We use the tag management system Tealium iQ, a service of Tealium Inc., 11085 Torreyana Road, San Diego, CA 92121, USA, via which we centrally manage, control and load third-party measuring pixels (tags) on our websites. 

This enables us to monitor the data entry of every provider tag and give our website visitors the opportunity to make decisions about third-party provider access and cookies themselves. 

Expanded functionality also means that we can dynamically adapt parts of the website and configure them automatically and in real time according to specific needs. A cookie called utag_main is deposited in order to enable the functionality. The tag management system is necessary for the provision of the service and cannot therefore be deactivated.

The applicable data protection clauses can be retrieved from https://tealium.com/de/privacy/.

13. What are my rights according to the GDPR?

As a data subject you have the right to assert your rights as a data subject to us at any time. You have the following rights in particular in this context:

  • You have the right to demand information about whether and, where appropriate, to what extent we process (or do not process) personal data concerning your person. 
  • In the event of processing personal data concerning your person you have the right to be informed about the following information in particular: data stored concerning your person, processing purpose(s), data categories, recipients to whom we reveal data, duration of storage. 
  • You have the right to demand that we correct your data without delay, should these data be incorrect and/or incomplete.
  • You have the right to demand that we delete your personal data without delay.
  • You have the right to cancel consent you have given us to process your data at any time. 
  • You have the right to have the processing of your personal data restricted.
  • You have the right to receive the personal data concerning you, that you have provided to us, in a structured, standard and machine-readable format, and to transmit these data to another Data Manager.

On request, you will receive, free of charge, information concerning all personal data that we have stored concerning you. Naturally, you have the opportunity to correct any errors, to update obsolete information or to have the stored data deleted. 

You have the right, according to Art. 21 paragraph 1 and paragraph 5 GDPR, for reasons arising from your particular situation, to enter opposition against the processing of the personal data concerning you, which is performed on the basis of Art. 6 paragraph 1 letters e) or f) GDPR, with effect for the future; this also applies for profiling based on this clauses.

In the event of complaints, you can refer to the data protection supervisory authority of the EU or of the EU Member States at any time. 

Immowelt Holding AG Nordostpark 3-5 90411 Nuremberg, Germany T +49 911 520 25-0 F +49 911 520 25-25 info@immowelt-group.com

Stand: 25. Mai 2018
Datenschutzerklärung herunterladen