I. Controller and Data Protection Officer
Vandenberg Immoconsult GmbH,
10711 Berlin, Germany
represented by its managing directors Nedeljko Prodanovic and Andrea Felder
Tel.: (+49) 0 30 233 203 980
Fax: (+49) 0 30 233 203 989
Our company data protection officer may be contacted at Herbst | Bröcker, Lietzenseeufer 10, 14057 Berlin, Germany, Tel. 030/887 114 0 or at datenschutz @herbst-broecker.de.
II. Collection and Saving of Personal Data
1.** When Opening Our Website**
When opening our website www.vandenberg-berlin.com, information will automatically be transmitted to our website's server by your browser. This information will be temporarily saved in a so-called log file. The following information will be collected and saved for three months, after which time it will be deleted automatically without any action on your part:
- --IP address of the requesting computer,
- --Time and date of access,
- --Name and URL of the retrieved file,
- --Website from which our website is accessed (referrer URL),
- --Your browser and operating system and the name of your access provider.
We will process this data for the following purposes:
- Ensuring connectivity to our website,
- Ensuring comfortable use of our website,
- System security and stability assessments and
- Other administrative purposes.
The legal basis for data processing is Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation. Our legitimate interest is established by the above-stated data collection purposes. Under no circumstances will the collected data be used for the purpose of drawing conclusions about you personally.
2. When Using Our Contact Form
Should you have any questions, you may contact us through the contact form on our website. We will save the information you provide when submitting requests to us through our contact form (your first name, name, email address, telephone number and message) and the requested real estate object to process your inquiry and contact you.
We process data to contact you on the basis of your voluntary consent in accordance with Art. 6 (1) Sentence 1 Letter a of the General Data Protection Regulation. The personal data we collect through our contact form will be deleted after the handling of your request is complete, unless we are required by law to save this data.
Revocation rights: You may revoke any consent you granted through the contact form at any time. Please submit your revocation by email to firstname.lastname@example.org or to the address in our imprint.
3. When using our chat "Crisp"
On our website we have a chat installed which is provided by Crisp IM SARL, 149 rue Pierre Sémard, 29200 Brest, France.
When opening the chat, the following data will be transmitted:
- Your message to us
- Your activity status (online or offline)
- Geopgraphic location, town country (on the basis of your IP-address
- Day, time, timezone
- Preferred language
- Device and browser software
- Web pages viewed
- Available data which is synchronised with public information from Avatar, Twitter/Facebook
- E-Mail address (only if provided by yourself)
- Telephone number (only if provided by yourself)
Crisp is used to provide assistance with the use of the website and to answer questions regarding the content of our texts and offers. This constitutes a legitimate interest pursuant to art. 6 para. 1 lit. f DSGVO.
Further information on the handling of user data can be found in Crisp's data protection declaration at: https://crisp.chat/en/privacy/ If you wish to prevent the data from being passed on, please do not use the chat.
4. When Subscribing to Our Newsletter
We use our email newsletter to inform you about the services we offer and our company. If you subscribe to our newsletter and confirm your subscription by email, we will save your personal data (first name, name and email address) to regularly send you our newsletter (consent under Art. 6 (1) Sentence 1 Letter a of the General Data Protection Regulation).
We use Brevo to send our newsletter. Brevo is a service of Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.
Your personal data saved when you subscribe to our newsletter (first name, name, email address, IP address and the time and date of your subscription) will be transmitted to a server belonging to Sendinblue GmbH in Europe. For more information about data protection when using Brevo, please see: https://www.brevo.com/de/legal/privacypolicy/.
You may unsubscribe from our newsletter at any time, e.g., by activating the link at the end of each newsletter, by emailing us at email@example.com or by contacting us by mail at the address in our imprint.
To design our newsletter according or our users' needs, clicks on links featured in the newsletter will be registered, saved and assessed. If you do not want us to register your usage behavior, you may object to this data collection and use. Please submit your objections by email to firstname.lastname@example.org or to the address in our imprint. However, please note that submitting an objection will result in the cancellation of your newsletter subscription.
5. When participating in customers recruit customers
If you have registered for the campaign "Customers recruit customers" we initially store your personal data such as your first name, surname and email address in order to send you a credit note in the event of a successful recommendation of a buyer. We, therefore, for purposes of contract initiation and processing, require this data from you (art. 6 sec. 1 S. 1 lit. b GDPR). Your data will not be used for any other purposes and will not be passed on to third parties.
We will delete your data if it is no longer required for the fulfilment of contractual or statutory obligations (in particular warranty obligations). In other respects, the statutory storage obligations apply (see more details under item IX).
You can delete your registration and data from our database at any time. In this case, please contact us by e-mail at email@example.com or via the address provided in the imprint.
We strive to make use of our website pleasant and beneficial for our visitors. To achieve this, we collect data on user behavior to continuously improve our website. This data is collected through cookies, i.e., small text files transmitted through your browser and saved on your computer. Cookies do not retrieve information from your hard disk and do not impair your PC or your data. We primarily use so-called "session cookies." Session cookies are deleted automatically when your visit ends. Other cookies will remain saved on your device until they are deleted by you. These cookies allow us to recognize your browser during your next visit.
When sending our newsletter, we use web beacons (small graphics files) to collect and statistically assess information.
The data processed by cookies is required for the stated purposes to safeguard legitimate interests of ours and of third-parties in accordance with Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation. Most browsers accept cookies automatically. However, you may configure your browser to disable cookies or to display notices before cookies are installed. However, please note that completely disabling cookies may prevent you from fully using every function of our website.
7. Google Analytics
The IP address transmitted by your browser through Google Analytics will not be merged with other Google data. You can prevent cookies from being saved at any time through your browser settings. However, please note that doing so may prevent you from using every function of this website. By using this website, you agree to have the data collected on you processed by in the described manner and for the stated purposes.
Furthermore, you can prevent the collection of cookie-generated data (including your IP address) on your use of the website and the processing of this data by Google by downloading and installing the browser plugin provided under the following link: http://tools.google.com/dlpage/gaoptout?hl=en. You may also prevent data collection by Google Analytics by activating the following link which will install an opt-out cookie that will block any future collection of your data when visiting or website: https://tools.google.com/dlpage/gaoptout.
8. Adobe Typekit Web Fonts
9. Google Remarketing
This website uses the remarketing function of Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Irland. This function allows us to display interest-based advertisements to visitors of our website. Your browser will install cookies, i.e., text files saved on your computer that enable us to recognize visitors when they open websites that are part of the Google Display Network.
On these pages, advertisements may be displayed that refer to contents that the visitor previously opened on other websites that use Google's remarketing function. According to its own statements, Google does not collect personal data in this process.
By using this website, you consent to the processing of collected data about you in the described manner and for the stated purposes.
Nonetheless, Google remarketing may be disabled through the following settings: http://www.google.com/settings/ads.
10. Social Media Plugins
Our Internet presence uses social media plugins ("plugins") of various providers on the basis of Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation to increase awareness of our company. These underlying advertising purposes represent legitimate interests in the sense of the General Data Protection Regulation. The respective providers are responsible for operating in accordance with data protection regulations. Plugins on our website employ the so-called double-click method to provide the best possible protection to visitors of our website.
Our website features so-called social plugins ("plugins") of Facebook operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland ("Meta").
This plugin can be recognized by the gray-shaded Facebook logo. When you open a page of our Internet presence that features such a plugin, your browser will establish a direct connection to Meta servers. Meta will transmit the contents of the plugin directly to your browser which will display them on our website.
Included plugins will notify Meta that your browser opened a respective page of our website, even if you do not have a Facebook account or are not logged in to Facebook. Your browser will transmit this information (including your IP address) directly to a Meta server in the US where it will be saved. If you are logged in to Facebook, Meta may directly assign your visit to our website to your Facebook account.
Meta may use this information for advertising, market research and need-based design purposes of Facebook pages. For this, Meta creates usage, interest and relationship profiles to, e.g., asses your use of our website with a view to the advertisements displayed on Facebook, inform other Facebook users about your activities on our website and to provide other services related to use of Facebook.
If you do not want Meta to assign the data collected through our website to your Facebook account, please log out of your Facebook account before visiting our website. You may also disable Facebook plugins through the respective g add-ons for your browser, e.g.,
For the purpose and extent of data collection, further processing and use of data by Facebook and your respective rights and settings options for protecting your privacy, please see Meta Data Policy ( https://www.facebook.com/about/privacy/).
Our website features so-called social plugins ("plugins") of Instagram operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta"). The plugins are marked with an Instagram logo, e.g., in form of an "Instagram camera."
When you open a page of our Internet presence that features such a plugin, your browser will establish a direct connection to Meta servers. Meta will transmit the contents of the plugin directly to your browser which will display them on our website. Included plugins will notify Meta that your browser opened an according page of our website, even if you do not have an Instagram account or are not logged in to Instagram.
Your browser will transmit this information (including your IP address) directly to an Meta server in the US where it will be saved. If you are logged in to Instagram, Meta may directly assign your visit to our website to your Instagram account. If you interact with these plugins, e.g., by activating the "Instagram" button, this information will also be transmitted directly to a Meta server where it will be saved. In addition, this information will be published on your Instagram account and shared with your contacts.
If you do not want Meta to assign the data collected through our website to your Instagram account, please log out of your Instagram account before visiting our website.
Our website features so-called social plugins ("plugins") of Pinterest operated by Pinterest Europe Ltd.,Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). The plugins can be recognized, e.g., through "Pin it" buttons with a white or red background.
When you open a page of our Internet presence that features such a plugin, your browser will establish a direct connection to Pinterest's servers. Pinterest will transmit the contents of the plugin directly to your browser which will display them on our website. Included plugins will notify Pinterest that your browser opened an according page of our website, even if you do not have a Pinterest account or are not logged in to Pinterest.
Your browser will transmit this information (including your IP address) directly to a Pinterest server in the US where it will be saved. If you are logged in to Pinterest, Pinterest may directly assign your visit to our website to your Pinterest account. If you interact with these plugins, e.g., by activating the "Pin it" button, this information will also be transmitted directly to a Pinterest server where it will be saved. In addition, this information will be published on Pinterest and shared with your Pinterest contacts.
If you do not want Pinterest to assign the data collected through our website to your Pinterest account, please log out of your Pinterest account before visiting our website. You may also disable Pinterest plugins through according add-ons for your browser, e.g., the script blocker "NoScript" ( http://noscript.net/).
Our website features the "Share" function of the network LinkedIn operated by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
When the "Share" button ("plugin") is activated, your browser will establish a direct connection to LinkedIn's server. This will notify LinkedIn that you visited our website with your IP address and allow LinkedIn to assign your visit to our website to you and your user account. We are not aware of the contents of or use by LinkedIn of transmitted (personal) data.
Our website features social plugins ("plugin") of the social network Foursquare operated by Foursquare, 568 Broadway, 10th Floor, New York, NY 10012, USA. The Foursquare button may be recognized by the white-on-pink F.
The "plugin" will establish a direct connection between your browser and the Foursquare server. This will notify Foursquare that you visited our website with your IP address and allow Foursquare to assign your visit to our website to you and your user account. We are not aware of the contents of or use by Foursquare of transmitted data.
11. Use of Google Maps
Our website uses the map service "Google Maps" of Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Irland
When using "Google Maps," Google will install a cookie to process user settings and data when displaying the page that features "Google Maps." This cookie will usually not be deleted when closing your browser, but will expire after a certain period, unless it is deleted manually.
"Google Maps" and the data collected by "Google Maps" is used in accordance with the Google Terms of Service
and the Google Maps Additional Terms of Service
12. Third-Party Service and Content Inclusion
Our online offer may include third-party contents, e.g., videos provided through YouTube, maps through Google-Maps (see Section II. 8), RSS feeds or graphics of other websites. This requires the providers of these contents (hereafter referred to as "third-party providers") to receive user IP addresses. Without an IP address, contents cannot be transmitted to the user's browser. An IP address is therefore necessary for displaying these contents. We strive to only use contents whose providers merely use IP addresses to provide the respective contents. However, we cannot influence whether the third-party provider saves the IP address for, e.g., statistical purposes. We will notify our users accordingly to the best of our knowledge.
13. Registration Function
You may create a user account on our website to manage your real estate object searches and to upload and save personal data and documents. As part of the registration, users will be informed about the information required that will be processed on the basis of Art. 6 (1) Letter b of the General Data Protection Regulation to provide the user account. Processed data includes the login information (first name, last name, password and email address). The data entered for the registration will be used to provide the user account.
Your saved real estate objects, appointments and email communication with our employees will be saved on our customer portal. If you add or change your personal data on the customer portal (e.g., your address) or add real estate objects through the "Save for later" function, these changes will be saved. We will provide relevant documents to you through the customer portal. To offer an extensive service, we will use your data to provide suitable own or external information about our product through the portal.
You may cancel your registration and delete your user profile at any time. Please contact us by email at firstname.lastname@example.org or at the address in our imprint. Transfers to third parties will not be carried out without your permission, unless we are required to do so by law. During registration and logging in, your data will be SSL-encrypted to protect it from misuse.
14. Online reservation and notary registration
On our website you have the possibility to reserve real estate offered by us and to request a notary. In the context of a request made by you via the form provided, the information you provide (first name, last name, address, email address, telephone number, date of birth, profession, tax ID, nationality, PEP, marital status, matrimonial property status, own funds) and the requested property will be stored so that we can process your reservation and contact you.
The data processing for the purpose of the online reservation is carried out in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO on the basis of your voluntarily given consent. The personal data collected by us for the use of the form will be deleted after completion of your request, unless we are legally obliged to further storage.
Right of revocation: You have the possibility to revoke your consent given in the form at any time. Please send your objection by e-mail to email@example.com or to our address given in the imprint.
15. Real estate valuation
On our website you have the possibility to request a free initial valuation of your real estate. We process the data you enter in the form in order to provide you with the requested valuation of your property.
The data processing for the purpose of the real estate valuation is carried out according to Art. 6 para. 1 p. 1 lit. a DSGVO on the basis of your voluntarily given consent. The personal data collected by us for the use of the form will be deleted after completion of your request, unless we are legally obliged to further storage.
Right of revocation: You have the possibility to revoke your consent given in the form at any time. Please send your objection by e-mail to firstname.lastname@example.org or to our address given in the imprint.
16. Payment service provider Stripe
We offer the option to process the payment transaction via the payment service provider Stripe Payments Europe Limited 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. This is in line with our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f DSGVO). In this context, we share the following data with Stripe to the extent necessary for the performance of the contract (Art. 6 para. 1 lit b. DSGVO).
- Name of the cardholder
- Email address
- Customer number
- Order number
- Bank details
- Credit card data
- Credit card validity period
- Credit card verification number (CVC)
- Date and time of transaction
- Transaction amount
- Name of the provider
The processing of the data provided under this section is not required by law or contract. We cannot process a payment via Stripe without the submission of your personal data. [You have the option to choose another payment method].
Stripe has a dual role in data processing activities as a controller and processor. As a controller, Stripe uses your submitted data to comply with regulatory obligations. This is in accordance with Stripe's legitimate interest (pursuant to Art. 6 (1) lit. f DSGVO) and serves the performance of the contract (pursuant to Art. 6 (1) lit. b DSGVO). We have no influence on this process.
Stripe acts as an order processor in order to be able to complete transactions within the payment networks. Within the scope of the order processing relationship, Stripe acts exclusively according to our instructions and has been contractually obligated within the meaning of Art. 28 DSGVO to comply with the provisions of data protection law.
Stripe has implemented compliance measures for international data transfers. These apply to all global activities where Stripe processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs).
For more information about opting out and opting in with Stripe, please visit: https://stripe.com/privacy-center/legal.
Your data will be stored by us until the payment processing is completed. This also includes the period required for processing refunds, receivables management and fraud prevention.
17 Digital signature of contracts (DocuSign)
III. Contractual Relationship
Please note that we collect and save the personal data required for contract establishment and performance for this very purpose in accordance with the applicable legal regulations (Art. 6 (1) Sentence 1 Letter b of the General Data Protection Regulation). The data processed by us includes inventory data (e.g., names and addresses), contact data (e.g., email addresses and telephone numbers), contract data (e.g., commissioned services, contractual communication, names of contact persons) and payment data (e.g., bank details, payment history).
We will delete this data once it is no longer needed for contract performance or to fulfill legal obligations (especially guarantee obligations); apart from that, legal storage requirements apply (see Section IX).
IV. Data Security
We implemented suitable technical and organizational measures to ensure an appropriate level of security in accordance with Art. 32 of the General Data Protection Regulation and in consideration of the state of technology, implementation costs and the type, scope, circumstances and purpose of the processing and various likelihoods of occurrence and risk to the rights and freedoms of natural persons.
These measures especially include ensuring the confidentiality, integrity and availability of data by controlling physical access to the data and its retrieval, entry, forwarding and separation. In addition, we established a process that safeguards data subject rights, ensures data deletion and enables us to respond to threats. Furthermore, we already consider the protection of personal data when developing or selecting hardware, software and processes in accordance with data protection principles through according technical designs and data protection-friendly default settings (Art. 25 of the General Data Protection Regulation).
V. Data Transfers to Third Parties
Your personal data will not be transferred to third parties for purposes other than the following. We will only provide your data to third parties if:
- You granted your express consent under Art. 6 (1) Sentence 1 Letter a of the General Data Protection Regulation,
- The transfer is required by Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation to establish, exercise or defend legal claims and if there is no reason to believe that your interests in non-disclosure of your data outweigh our interests in the transfer,
- The data is transferred as legally required under Art. 6 (1) Sentence 1 Letter c of the General Data Protection Regulation or if
- Permitted by law and required under Art. 6 (1) Sentence 1 Letter b of the General Data Protection Regulation for contract performance.
VI. Data Subject Rights
If you would like to exercise the following rights, please submit your requests in writing to the controller or to the data protection officer specified in Section I.
1. Information About and Correction of Your Data
You have the right to demand information from us free of charge about whether and which personal data on you is saved by us. Should incorrect information about you be saved despite our best efforts to maintain accurate and up-to-date data, we will correct this without delay on your request.
2. Right to Deletion of Your Data
Furthermore, you may demand the deletion of the data we saved on you, unless its processing is required to exercise the right to free speech and information, to fulfill legal obligations, for reasons in the public interest or to establish, exercise or defend legal claims.
3. Right to Restrict the Processing of Your Data
You may demand the restriction of the processing of your personal data if you contest the accuracy of the data, if you refuse the deletion of the data even though its processing is unlawful, if we no longer require the data, but it is needed by you to establish, exercise or defend legal claims or if you submit an objection to the processing of the data under Art. 21 of the General Data Protection Regulation.
4. Right to Data Portability
You also have the right to receive the personal data you provide to us in a structured, customary and machine-readable format and to demand its transfer to another controller.
5. Right to Submit Complaints
You may submit complaints to competent data protection supervisory authorities, e.g., the competent supervisory authority for your habitual residence or workplace or for our company.
VII. Objection Rights
If your personal data is processed on the basis of legitimate interests under Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation, you may object to the processing of your personal data in accordance with Art. 21 of the General Data Protection Regulation, provided that there are reasons for this that arise from your particular circumstances.
VIII. Revocation Rights
Under Art. 7(3) of the General Data Protection Regulation, you have the right to revoke any consent granted at any time with future effect.
IX. Data Deletion