Privacy Policy

We take the protection of personal data seriously. This Privacy Policy will inform you about the purposes for which we collect, how we treat and to whom we may provide your personal data (e.g., your title, name, address, email address, telephone number, bank details and data you upload via our "customer portal; personal area" of the website www.vandenberg-berlin.com).

I. Controller and Data Protection Officer

This Privacy Policy applies to data processed by:

Controller:

Vandenberg Immoconsult GmbH,

Kurfürstendamm 104

10711 Berlin, Germany

represented by its managing directors Nedeljko Prodanovic and Andrea Felder

Tel.: (+49) 0 30 233 203 980

Fax: (+49) 0 30 233 203 989

Email: info@vandenberg-berlin.com

Website: www.vandenberg-berlin.com

Our company data protection officer may be contacted at Herbst | Bröcker, Lietzenseeufer 10, 14057 Berlin, Germany, Tel. 030/887 114 0 or at datenschutz @herbst-broecker.de.

II. Collection and Saving of Personal Data

1.** When Opening Our Website**

When opening our website www.vandenberg-berlin.com, information will automatically be transmitted to our website's server by your browser. This information will be temporarily saved in a so-called log file. The following information will be collected and saved for three months, after which time it will be deleted automatically without any action on your part:

--IP address of the requesting computer,
--Time and date of access,
--Name and URL of the retrieved file,
--Website from which our website is accessed (referrer URL),
--Your browser and operating system and the name of your access provider.

We will process this data for the following purposes:

Ensuring connectivity to our website,
Ensuring comfortable use of our website,
System security and stability assessments and
Other administrative purposes.

The legal basis for data processing is Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation. Our legitimate interest is established by the above-stated data collection purposes. Under no circumstances will the collected data be used for the purpose of drawing conclusions about you personally.

2. When Using Our Contact Form

Should you have any questions, you may contact us through the contact form on our website. We will save the information you provide when submitting requests to us through our contact form (your first name, name, email address, telephone number and message) and the requested real estate object to process your inquiry and contact you.

We process data to contact you on the basis of your voluntary consent in accordance with Art. 6 (1) Sentence 1 Letter a of the General Data Protection Regulation. The personal data we collect through our contact form will be deleted after the handling of your request is complete, unless we are required by law to save this data.

Revocation rights: You may revoke any consent you granted through the contact form at any time. Please submit your revocation by email to info@vandenberg-berlin.com or to the address in our imprint.

3. When using our chat "Crisp"

On our website we have a chat installed which is provided by Crisp IM SARL, 149 rue Pierre Sémard, 29200 Brest, France.

When opening the chat, the following data will be transmitted:

Your message to us
Your activity status (online or offline)
Geopgraphic location, town country (on the basis of your IP-address
Day, time, timezone
Preferred language
Device and browser software
Web pages viewed
Available data which is synchronised with public information from Avatar, Twitter/Facebook
E-Mail address (only if provided by yourself)
Telephone number (only if provided by yourself)

Crisp is used to provide assistance with the use of the website and to answer questions regarding the content of our texts and offers. This constitutes a legitimate interest pursuant to art. 6 para. 1 lit. f DSGVO.

Further information on the handling of user data can be found in Crisp's data protection declaration at: https://crisp.chat/en/privacy/ If you wish to prevent the data from being passed on, please do not use the chat.

4. When Subscribing to Our Newsletter

We use our email newsletter to inform you about the services we offer and our company. If you subscribe to our newsletter and confirm your subscription by email, we will save your personal data (first name, name and email address) to regularly send you our newsletter (consent under Art. 6 (1) Sentence 1 Letter a of the General Data Protection Regulation).

We use Brevo to send our newsletter. Brevo is a service of Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Your personal data saved when you subscribe to our newsletter (first name, name, email address, IP address and the time and date of your subscription) will be transmitted to a server belonging to Sendinblue GmbH in Europe. For more information about data protection when using Brevo, please see: https://www.brevo.com/de/legal/privacypolicy/.

You may unsubscribe from our newsletter at any time, e.g., by activating the link at the end of each newsletter, by emailing us at info@vandenberg-berlin.com or by contacting us by mail at the address in our imprint.

To design our newsletter according or our users' needs, clicks on links featured in the newsletter will be registered, saved and assessed. If you do not want us to register your usage behavior, you may object to this data collection and use. Please submit your objections by email to info@vandenberg-berlin.com or to the address in our imprint. However, please note that submitting an objection will result in the cancellation of your newsletter subscription.

5. When participating in customers recruit customers

If you have registered for the campaign "Customers recruit customers" we initially store your personal data such as your first name, surname and email address in order to send you a credit note in the event of a successful recommendation of a buyer. We, therefore, for purposes of contract initiation and processing, require this data from you (art. 6 sec. 1 S. 1 lit. b GDPR). Your data will not be used for any other purposes and will not be passed on to third parties.

We will delete your data if it is no longer required for the fulfilment of contractual or statutory obligations (in particular warranty obligations). In other respects, the statutory storage obligations apply (see more details under item IX).

You can delete your registration and data from our database at any time. In this case, please contact us by e-mail at info@vandenberg-berlin.com or via the address provided in the imprint.

6. Cookies

We strive to make use of our website pleasant and beneficial for our visitors. To achieve this, we collect data on user behavior to continuously improve our website. This data is collected through cookies, i.e., small text files transmitted through your browser and saved on your computer. Cookies do not retrieve information from your hard disk and do not impair your PC or your data. We primarily use so-called "session cookies." Session cookies are deleted automatically when your visit ends. Other cookies will remain saved on your device until they are deleted by you. These cookies allow us to recognize your browser during your next visit.

When sending our newsletter, we use web beacons (small graphics files) to collect and statistically assess information.

The data processed by cookies is required for the stated purposes to safeguard legitimate interests of ours and of third-parties in accordance with Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation. Most browsers accept cookies automatically. However, you may configure your browser to disable cookies or to display notices before cookies are installed. However, please note that completely disabling cookies may prevent you from fully using every function of our website.

7. Google Analytics

This website uses Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Google Analytics uses cookies. The information on your website use generated by the cookie is generally transmitted to a Google server in the USA where it is saved. If IP-anonymization is activated on our website, your IP address will be shortened by Google within member states of the European Union or in other states party to the European Economic Area Agreement. Only in exceptional cases will your full IP address be transferred to a Google server in the US and shortened there. We activated this IP anonymization for you and it is active on our website. On behalf of the operator of this website, Google will use this information to assess your use of this website, to compile reports about website activity and to perform additional services related to use of the website and the Internet for the website operator.

The IP address transmitted by your browser through Google Analytics will not be merged with other Google data. You can prevent cookies from being saved at any time through your browser settings. However, please note that doing so may prevent you from using every function of this website. By using this website, you agree to have the data collected on you processed by in the described manner and for the stated purposes.

Furthermore, you can prevent the collection of cookie-generated data (including your IP address) on your use of the website and the processing of this data by Google by downloading and installing the browser plugin provided under the following link: http://tools.google.com/dlpage/gaoptout?hl=en. You may also prevent data collection by Google Analytics by activating the following link which will install an opt-out cookie that will block any future collection of your data when visiting or website: https://tools.google.com/dlpage/gaoptout.

8. Adobe Typekit Web Fonts

This site uses so-called web fonts, which are provided by Adobe Typekit, for uniform representation of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. To do this, the browser you are using must connect to the Adobe Typekit servers. This will give Adobe Typekit knowledge that your website has been accessed through your IP address. The use of Adobe Typekit Web Fonts is in the interest of a uniform and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, a standard font will be used by your computer. For additional information please visit https://typekit.com/ or see the Adobe Typekit privacy policy: https://www.adobe.com/de/privacy/policies/typekit.html.

9. Google Remarketing

This website uses the remarketing function of Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Irland. This function allows us to display interest-based advertisements to visitors of our website. Your browser will install cookies, i.e., text files saved on your computer that enable us to recognize visitors when they open websites that are part of the Google Display Network.

On these pages, advertisements may be displayed that refer to contents that the visitor previously opened on other websites that use Google's remarketing function. According to its own statements, Google does not collect personal data in this process.

By using this website, you consent to the processing of collected data about you in the described manner and for the stated purposes.

Nonetheless, Google remarketing may be disabled through the following settings: http://www.google.com/settings/ads.

Alternatively, you may disable cookies for interest-based advertisements by following the instructions at http://optout.networkadvertising.org/. For more information about Google remarketing Google's privacy policy, please see: https://www.google.com/policies/technologies/ads/.

10. Social Media Plugins

Our Internet presence uses social media plugins ("plugins") of various providers on the basis of Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation to increase awareness of our company. These underlying advertising purposes represent legitimate interests in the sense of the General Data Protection Regulation. The respective providers are responsible for operating in accordance with data protection regulations. Plugins on our website employ the so-called double-click method to provide the best possible protection to visitors of our website.

a) Facebook

Our website features so-called social plugins ("plugins") of Facebook operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland ("Meta").

This plugin can be recognized by the gray-shaded Facebook logo. When you open a page of our Internet presence that features such a plugin, your browser will establish a direct connection to Meta servers. Meta will transmit the contents of the plugin directly to your browser which will display them on our website.

Included plugins will notify Meta that your browser opened a respective page of our website, even if you do not have a Facebook account or are not logged in to Facebook. Your browser will transmit this information (including your IP address) directly to a Meta server in the US where it will be saved. If you are logged in to Facebook, Meta may directly assign your visit to our website to your Facebook account.

Meta may use this information for advertising, market research and need-based design purposes of Facebook pages. For this, Meta creates usage, interest and relationship profiles to, e.g., asses your use of our website with a view to the advertisements displayed on Facebook, inform other Facebook users about your activities on our website and to provide other services related to use of Facebook.

If you do not want Meta to assign the data collected through our website to your Facebook account, please log out of your Facebook account before visiting our website. You may also disable Facebook plugins through the respective g add-ons for your browser, e.g.,

for Mozilla Firefox: https://addons.mozilla.org/en-US/firefox/a ddon/facebook-blocker/

for Opera: https://addons.opera.com/de/extensions/details/facebook-blocker/?display=en

for Chrome: https://chrome.google.com/webstore/detail/facebookblocker/cohbmkonphbnkadgpcpofdpjiopbbhdl

For the purpose and extent of data collection, further processing and use of data by Facebook and your respective rights and settings options for protecting your privacy, please see Meta Data Policy ( https://www.facebook.com/about/privacy/).

b) Instagram

Our website features so-called social plugins ("plugins") of Instagram operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta"). The plugins are marked with an Instagram logo, e.g., in form of an "Instagram camera."

When you open a page of our Internet presence that features such a plugin, your browser will establish a direct connection to Meta servers. Meta will transmit the contents of the plugin directly to your browser which will display them on our website. Included plugins will notify Meta that your browser opened an according page of our website, even if you do not have an Instagram account or are not logged in to Instagram.

Your browser will transmit this information (including your IP address) directly to an Meta server in the US where it will be saved. If you are logged in to Instagram, Meta may directly assign your visit to our website to your Instagram account. If you interact with these plugins, e.g., by activating the "Instagram" button, this information will also be transmitted directly to a Meta server where it will be saved. In addition, this information will be published on your Instagram account and shared with your contacts.

If you do not want Meta to assign the data collected through our website to your Instagram account, please log out of your Instagram account before visiting our website.

For the purpose and extent of data collection, further processing and use of data by Meta and your respective rights and settings options for protecting your privacy, please see Instagram's Privacy Policy https://help.instagram.com/155833707900388.

c) Pinterest

Our website features so-called social plugins ("plugins") of Pinterest operated by Pinterest Europe Ltd.,Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). The plugins can be recognized, e.g., through "Pin it" buttons with a white or red background.

When you open a page of our Internet presence that features such a plugin, your browser will establish a direct connection to Pinterest's servers. Pinterest will transmit the contents of the plugin directly to your browser which will display them on our website. Included plugins will notify Pinterest that your browser opened an according page of our website, even if you do not have a Pinterest account or are not logged in to Pinterest.

Your browser will transmit this information (including your IP address) directly to a Pinterest server in the US where it will be saved. If you are logged in to Pinterest, Pinterest may directly assign your visit to our website to your Pinterest account. If you interact with these plugins, e.g., by activating the "Pin it" button, this information will also be transmitted directly to a Pinterest server where it will be saved. In addition, this information will be published on Pinterest and shared with your Pinterest contacts.

If you do not want Pinterest to assign the data collected through our website to your Pinterest account, please log out of your Pinterest account before visiting our website. You may also disable Pinterest plugins through according add-ons for your browser, e.g., the script blocker "NoScript" ( http://noscript.net/).

For the purpose and extent of data collection, further processing and use of data by Pinterest and your respective rights and settings options for protecting your privacy, please see Pinterest's privacy policy: https://policy.pinterest.com/en-gb/privacy-policy.

d) XING

Our website features the "XING Share Button" of New Work SE, Am Strandkai 1, 20457 Hamburg, Deutschland. When opening this website, your browser will establish a short-term connection to the New Work SE servers that provide the "XING Share Button" functions (especially the determination/display of the counter value). New Work SE will not save personal data on your visit to this page. New Work SE will especially not save IP addresses or use cookies to assess your use of the "XING Share Button." For the respectively current data protection policy of the "XING Share Button" and additional information, please see: https://www.xing.com/app/share?op=data_protection.

e) LinkedIn

Our website features the "Share" function of the network LinkedIn operated by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

When the "Share" button ("plugin") is activated, your browser will establish a direct connection to LinkedIn's server. This will notify LinkedIn that you visited our website with your IP address and allow LinkedIn to assign your visit to our website to you and your user account. We are not aware of the contents of or use by LinkedIn of transmitted (personal) data.

For the purpose and extent of data collection, further processing and use of data by LinkedIn and your respective rights and settings options for protecting your privacy, please see LinkedIn's Privacy Policy: https://www.linkedin.com/legal/privacy-policy.

f) Foursquare

Our website features social plugins ("plugin") of the social network Foursquare operated by Foursquare, 568 Broadway, 10th Floor, New York, NY 10012, USA. The Foursquare button may be recognized by the white-on-pink F.

The "plugin" will establish a direct connection between your browser and the Foursquare server. This will notify Foursquare that you visited our website with your IP address and allow Foursquare to assign your visit to our website to you and your user account. We are not aware of the contents of or use by Foursquare of transmitted data.

For the purpose and extent of data collection, further processing and use of data by Foursquare and your respective rights and settings options for protecting your privacy, please see Foursquare's privacy policy: https://foursquare.com/legal/privacy.

11. Use of Google Maps

Our website uses the map service "Google Maps" of Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Irland

When using "Google Maps," Google will install a cookie to process user settings and data when displaying the page that features "Google Maps." This cookie will usually not be deleted when closing your browser, but will expire after a certain period, unless it is deleted manually.

If you do not want "Google Maps" to process your data, you may disable "Google Maps" to prevent data transfers to Google. To do so, please disable JavaScript on your browser. However, please note that doing so may prevent you from using "Google Maps" or from using "Google Maps" fully.

"Google Maps" and the data collected by "Google Maps" is used in accordance with the Google Terms of Service

https://policies.google.com/terms?hl=en&gl=de (German)

and the Google Maps Additional Terms of Service

https://maps.google.com/help/terms_maps.html.

12. Third-Party Service and Content Inclusion

Our online offer may include third-party contents, e.g., videos provided through YouTube, maps through Google-Maps (see Section II. 8), RSS feeds or graphics of other websites. This requires the providers of these contents (hereafter referred to as "third-party providers") to receive user IP addresses. Without an IP address, contents cannot be transmitted to the user's browser. An IP address is therefore necessary for displaying these contents. We strive to only use contents whose providers merely use IP addresses to provide the respective contents. However, we cannot influence whether the third-party provider saves the IP address for, e.g., statistical purposes. We will notify our users accordingly to the best of our knowledge.

13. Registration Function

You may create a user account on our website to manage your real estate object searches and to upload and save personal data and documents. As part of the registration, users will be informed about the information required that will be processed on the basis of Art. 6 (1) Letter b of the General Data Protection Regulation to provide the user account. Processed data includes the login information (first name, last name, password and email address). The data entered for the registration will be used to provide the user account.

Your saved real estate objects, appointments and email communication with our employees will be saved on our customer portal. If you add or change your personal data on the customer portal (e.g., your address) or add real estate objects through the "Save for later" function, these changes will be saved. We will provide relevant documents to you through the customer portal. To offer an extensive service, we will use your data to provide suitable own or external information about our product through the portal.

You may cancel your registration and delete your user profile at any time. Please contact us by email at info@vandenberg-berlin.com or at the address in our imprint. Transfers to third parties will not be carried out without your permission, unless we are required to do so by law. During registration and logging in, your data will be SSL-encrypted to protect it from misuse.

14. Online reservation and notary registration

On our website you have the possibility to reserve real estate offered by us and to request a notary. In the context of a request made by you via the form provided, the information you provide (first name, last name, address, email address, telephone number, date of birth, profession, tax ID, nationality, PEP, marital status, matrimonial property status, own funds) and the requested property will be stored so that we can process your reservation and contact you.

The data processing for the purpose of the online reservation is carried out in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO on the basis of your voluntarily given consent. The personal data collected by us for the use of the form will be deleted after completion of your request, unless we are legally obliged to further storage.

Right of revocation: You have the possibility to revoke your consent given in the form at any time. Please send your objection by e-mail to info@vandenberg-berlin.com or to our address given in the imprint.

15. Real estate valuation

On our website you have the possibility to request a free initial valuation of your real estate. We process the data you enter in the form in order to provide you with the requested valuation of your property.

The data processing for the purpose of the real estate valuation is carried out according to Art. 6 para. 1 p. 1 lit. a DSGVO on the basis of your voluntarily given consent. The personal data collected by us for the use of the form will be deleted after completion of your request, unless we are legally obliged to further storage.

16. Payment service provider Stripe

We offer the option to process the payment transaction via the payment service provider Stripe Payments Europe Limited 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. This is in line with our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f DSGVO). In this context, we share the following data with Stripe to the extent necessary for the performance of the contract (Art. 6 para. 1 lit b. DSGVO).

- Name of the cardholder

- Email address

- Customer number

- Order number

- Bank details

- Credit card data

- Credit card validity period

- Credit card verification number (CVC)

- Date and time of transaction

- Transaction amount

- Name of the provider

- Place

The processing of the data provided under this section is not required by law or contract. We cannot process a payment via Stripe without the submission of your personal data. [You have the option to choose another payment method].

Stripe has a dual role in data processing activities as a controller and processor. As a controller, Stripe uses your submitted data to comply with regulatory obligations. This is in accordance with Stripe's legitimate interest (pursuant to Art. 6 (1) lit. f DSGVO) and serves the performance of the contract (pursuant to Art. 6 (1) lit. b DSGVO). We have no influence on this process.

Stripe acts as an order processor in order to be able to complete transactions within the payment networks. Within the scope of the order processing relationship, Stripe acts exclusively according to our instructions and has been contractually obligated within the meaning of Art. 28 DSGVO to comply with the provisions of data protection law.

Stripe has implemented compliance measures for international data transfers. These apply to all global activities where Stripe processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs).

For more information about opting out and opting in with Stripe, please visit: https://stripe.com/privacy-center/legal.

Your data will be stored by us until the payment processing is completed. This also includes the period required for processing refunds, receivables management and fraud prevention.

17. Digital signature of contracts (DocuSign)

We use the software DocuSign of DocuSign Inc., 221 Main St., San Francisco, CA 94105, USA ("DocuSign") for the digital signature of contracts and documents. For this purpose, DocuSign processes the data entered by you when using the service as well as usage data of your terminal device and transaction-related data. The legal basis is Art. 6 para. 1 p. 1 lit. b) and f) DSGVO. DocuSign stores all personal data on servers within the EU. The contract concluded with DocuSign International (EMEA) Limited, 5 Hanover Quay, Grand Canal Dock, Dublin | D02 VY79, Ireland, guarantees this. For more information on data processing by DocuSign, please refer to DocuSign's privacy policy at https://www.docusign.de/datenschutzerklaerung/datenschutz. To ensure a high level of data protection and so-called adequate safeguards, DocuSign has adopted binding internal data protection regulations in accordance with Art. 47 DSGVO, which you can view at https://www.docusign.com/trust/privacy/binding-corporate-rules. We store your personal data for as long as is necessary to fulfil our legal and contractual obligations. If storage of the data is no longer necessary for the fulfilment of contractual or legal obligations, the data will be deleted.

18. Propstack

We use the CRM tool Propstack, Propstack GmbH, Mollstraße 31, 10249 Berlin, to process and store your contact data. We use the CRM tool Propstack for the systematic design of contact management (e.g. for the efficient and fast processing of customer inquiries, e-mail dispatch, appointment management), sales management or project design with existing and potential customers. The legal basis for the processing of your personal data is Art. 6 para. 1 lit. b GDPR, as the processing of the data is necessary for the performance of a contract, the initiation of a contract or the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in effective processing, Art. 6 para. 1 lit. f GDPR or on the basis of consent, Art. 6 para. 1 lit. a GDPR.

Within the scope of the order processing relationship, Propstack acts exclusively in accordance with our instructions and has been contractually obliged to comply with data protection regulations within the meaning of Art. 28 GDPR. The data collected will only be used to provide the service. Your data will not be passed on to third parties. Further information on the processing of data by Propstack can be found here: https://www.propstack.de/legal/datenschutzbestimmungen

19. Bird

We use the notification tool Bird (formerly Messagebird), Keizersgracht 268, 1016 EV, Amsterdam, Netherlands (https://bird.com), for appointment reminders via SMS. Your telephone number is used for this. We use the Bird notification tool to remind you of appointments in connection with a contractual relationship, the initiation of a contract or the implementation of pre-contractual measures. The legal basis for the processing of your personal data is your consent - Art. 6 para. 1 lit. a GDPR. Within the scope of the order processing relationship, Bird acts exclusively in accordance with our instructions and has been contractually obliged to comply with the data protection regulations within the meaning of Art. 28 GDPR. The data collected will only be used to provide the service. Your data will not be passed on to third parties. Further information can be found in Bird's privacy policy: https://bird.com/de/legal/privacy.

III. Contractual Relationship

Please note that we collect and save the personal data required for contract establishment and performance for this very purpose in accordance with the applicable legal regulations (Art. 6 (1) Sentence 1 Letter b of the General Data Protection Regulation). The data processed by us includes inventory data (e.g., names and addresses), contact data (e.g., email addresses and telephone numbers), contract data (e.g., commissioned services, contractual communication, names of contact persons) and payment data (e.g., bank details, payment history).

We will delete this data once it is no longer needed for contract performance or to fulfill legal obligations (especially guarantee obligations); apart from that, legal storage requirements apply (see Section IX).

IV. Data Security

We implemented suitable technical and organizational measures to ensure an appropriate level of security in accordance with Art. 32 of the General Data Protection Regulation and in consideration of the state of technology, implementation costs and the type, scope, circumstances and purpose of the processing and various likelihoods of occurrence and risk to the rights and freedoms of natural persons.

These measures especially include ensuring the confidentiality, integrity and availability of data by controlling physical access to the data and its retrieval, entry, forwarding and separation. In addition, we established a process that safeguards data subject rights, ensures data deletion and enables us to respond to threats. Furthermore, we already consider the protection of personal data when developing or selecting hardware, software and processes in accordance with data protection principles through according technical designs and data protection-friendly default settings (Art. 25 of the General Data Protection Regulation).

V. Data Transfers to Third Parties

Your personal data will not be transferred to third parties for purposes other than the following. We will only provide your data to third parties if:

You granted your express consent under Art. 6 (1) Sentence 1 Letter a of the General Data Protection Regulation,
The transfer is required by Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation to establish, exercise or defend legal claims and if there is no reason to believe that your interests in non-disclosure of your data outweigh our interests in the transfer,
The data is transferred as legally required under Art. 6 (1) Sentence 1 Letter c of the General Data Protection Regulation or if
Permitted by law and required under Art. 6 (1) Sentence 1 Letter b of the General Data Protection Regulation for contract performance.

VI. Data Subject Rights

If you would like to exercise the following rights, please submit your requests in writing to the controller or to the data protection officer specified in Section I.

1. Information About and Correction of Your Data

You have the right to demand information from us free of charge about whether and which personal data on you is saved by us. Should incorrect information about you be saved despite our best efforts to maintain accurate and up-to-date data, we will correct this without delay on your request.

2. Right to Deletion of Your Data

Furthermore, you may demand the deletion of the data we saved on you, unless its processing is required to exercise the right to free speech and information, to fulfill legal obligations, for reasons in the public interest or to establish, exercise or defend legal claims.

3. Right to Restrict the Processing of Your Data

You may demand the restriction of the processing of your personal data if you contest the accuracy of the data, if you refuse the deletion of the data even though its processing is unlawful, if we no longer require the data, but it is needed by you to establish, exercise or defend legal claims or if you submit an objection to the processing of the data under Art. 21 of the General Data Protection Regulation.

4. Right to Data Portability

You also have the right to receive the personal data you provide to us in a structured, customary and machine-readable format and to demand its transfer to another controller.

5. Right to Submit Complaints

You may submit complaints to competent data protection supervisory authorities, e.g., the competent supervisory authority for your habitual residence or workplace or for our company.

VII. Objection Rights

If your personal data is processed on the basis of legitimate interests under Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation, you may object to the processing of your personal data in accordance with Art. 21 of the General Data Protection Regulation, provided that there are reasons for this that arise from your particular circumstances.

VIII. Revocation Rights

Under Art. 7(3) of the General Data Protection Regulation, you have the right to revoke any consent granted at any time with future effect.

IX. Data Deletion

In accordance with Art. 17 and Art. 18 of the General Data Protection Regulation, we will delete or restrict the processing of data processed by us. If no deletion date is specified by this Privacy Policy, the data we save will be deleted once it is no longer needed for its intended purpose and if its deletion is not prevented by legal storage obligations. If data is not deleted because it is required for other legally permissible purposes, its processing will be restricted. This especially applies to data that must be stored for commercial or tax law purposes (Section 147 of the German Fiscal Code [Abgabenordnung, AO], Section 257 of the German Commercial Code [Handelsgesetzbuch, HGB]).

X. Privacy Policy Validity and Changes

This Privacy Policy is currently valid as of May 2018. However, due to developments of our website and respective offers or due to changed legal or official requirements, adjustments to this Privacy Policy may be necessary.