Privacy

Privacy notice for use of the website “www.premium-properties.com”

Version dated: January 2023

1. General information
This privacy notice applies to the use of the website www.premium-properties.com provided by Generali Real Estate S.p.A., hereinafter referred to as the “website”. We ask you to read the following carefully.
The purpose of this privacy notice for the website is to inform you about the purposes for which we collect your data, how we use it, with whom we may share it and how you can exercise your rights. The protection of your personal data is of particular concern to us. We always ensure that your data is handled carefully and in accordance with data protection rules. We process personal data in accordance with the applicable legal provisions, in particular the European General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), the Telekommunikation-Digitale-Dienste-Datenschutzgesetz (TDDDG) and all other relevant legislation, and require our employees to maintain confidentiality in accordance with the applicable legal requirements.

2. Data controller
The data controller with respect to the processing of personal data in connection with the website is:
Generali Real Estate S.p.A.
Germany branch
Tunisstrasse 29
50667 Cologne

Phone: +49 (0) 221 4203 4310
E-mail: vermietung@premium-properties.com
(hereinafter “Generali Real Estate”, “GRE”, “we” or “us”).

You can reach our Data Protection Officer by post at the above address – marked for the attention of the Data Protection Officer – or via e-mail at konzerndatenschutz.de@generali.com.

3. Processing of your personal data
3.1 Use of the website for information purposes

Each time the website is used, certain data is automatically transmitted (usage data) – as is common on the Internet – and (some of) this data is logged by us in server log files. This includes the following information:
– IP address (Internet Protocol address) of the computer from which the website is being accessed
– Internet address of the website from which the website was requested (also known as referrer URL)
– Name of the accessed files or information
– Date, time and duration of the access
– Volume of data transferred
– http status code (e.g. “Request successful” or “Requested file not found”).
The aforementioned processing of data is carried out for the purpose of enabling the use of the website (establishing a connection; technical session control) and to prevent misuse/fraud on this website. Data processed in log files is therefore stored for security reasons (e.g. to identify attempted attacks) for a maximum of seven days and then deleted. Data that has to be retained for longer for evidentiary purposes is exempt from deletion until the incident in question has been conclusively resolved.
The legal basis for the corresponding processing of personal data is Art. 6 (1) lit. f GDPR (legitimate interests; such legitimate interest is derived from the aforementioned purposes of “enabling the use of the website” or, with regard to log files, “defending against and identifying cases of misuse”).

3.2 Cookies and other (analytics) tools

3.2.1 Cookies
We use cookies on this website. Cookies are small text files that are stored in your browser’s memory.
When you access individual pages of the website, we may use strictly necessary cookies to enable you to move around the website, use basic functions and ensure the security of the website; these cookies do not collect information about you for marketing purposes nor do they store information regarding which webpages you have visited. The legal basis for the use of these strictly necessary cookies is Art. 6 (1) sentence 1 lit. f GDPR (legitimate interest; such legitimate interest is derived from the aforementioned purposes, in particular session control, optimisation of website use and ensuring the security of the website) in conjunction with Sec. 25 (2) no. 2 TDDDG.

If and to the extent that we also use other, non-necessary cookies (from a technical point of view) when you visit the website, we will always obtain your consent in advance (via a consent management tool) regarding the use of such cookies on the website. Unless you give your consent, such cookies will not be used when you visit the website. The legal basis for the processing of personal data associated with such cookies is Art. 6 (1) sentence 1 lit. a GDPR (consent) in conjunction with Section 25 (1) sentence 1 TDDDG.

Standard browsers can usually be configured so that no cookies are stored. However, deactivating cookies may mean that you cannot make full or undisrupted use of all the functions of our website.

3.2.2 (Analytics) tools
a. Matomo
On this website we use the tool Matomo to analyse and review the use of our website. The statistics obtained enable us to improve the website and make it more interesting for you as a user. If you do not consent to the use of this tool when (first) accessing the website, none of this data regarding your use of our website will be processed using this tool.

To analyse website usage, your IP address and information such as timestamps, visited webpages and your language settings are collected if Matomo is used. We store the information collected on our server.
This website uses Matomo with the extension “AnonymizeIP”. This means that IP addresses are processed in abbreviated form so it is generally not possible to link an IP address to a person. The IP address transmitted from your browser via Matomo is not merged with other data we collect. The legal basis for the use of Matomo is Art. 6 (1) sentence 1 lit. a GDPR (consent) in conjunction with Sec. 25 (1) sentence 1 TDDDG.
You can prevent your data being used by Matomo for analytics in connection with our website in the future by, among other things, adjusting your settings in the consent management tool on the website (please use the following LINK).

You can find further information on Matomo here: https://matomo.org/privacy/; https://matomo.org/gdpr-analytics/

b. Immoviewer
Our website occasionally uses a plugin from 45info GmbH (Karl-Liebknecht-Strasse 21-22, 14482 Potsdam (Babelsberg)) to enable visitors to the website to take virtual tours of individual properties described on the website. When you visit one of the pages on our website that is equipped with an immoviewer plugin, a connection to immoviewer’s servers may be established, provided that you have agreed to the use of immoviewer beforehand via our consent management tool.

The legal basis for the corresponding processing of personal data is Art. 6 (1) sentence 1 lit. a GDPR (consent). You can prevent your data from being processed in this way going forward by adjusting your settings in the consent management tool on the website (please use the following LINK) You can find further information at https://www.immoviewer.de/datenschutz.

c. Google
i. Google Maps
On the website we may use Google Maps of the service provider Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
If you do not consent to the use of this tool when (first) accessing the website, none of your personal data will be processed with the help of or in connection with this tool. Every time Google Maps is accessed, a connection may be established with Google in order to process user settings and data when displaying the page in which Google Maps is integrated for the purpose of ensuring the functionality and improvement of the Maps functions by Google.

If you no longer agree to your data being processed in this way, you have the option of deactivating the Google Maps service and thus preventing the transfer of data to Google. To do this, you can deactivate the Java Script function in your browser. You can also deactivate the use of Google Maps on our website with regard to your personal data in the consent management tool on our website (see the following LINK). However, we would like to point out that you will not be able to use Google Maps, or use may be restricted, if you deactivate Google Maps.

The legal basis for the aforementioned processing of your personal data is Art. 6 (1) sentence 1 lit. a GDPR (consent).

In connection with the processing of data described above, processing may also be carried out by Google in the USA. Currently, the EU Commission has not issued a comprehensive decision on the adequacy of the level of data protection in the USA. In order to ensure a sufficient level of data protection, standard data protection clauses are used (by Google) in this respect within the meaning of Art. 46 (2) lit. c GDPR.
You can find more information here: http://www.google.de/intl/de/policies/privacy

ii) YouTube
On this website, we may integrate YouTube videos from Google’s online video platform YouTube (service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which are stored on YouTube servers and can be played directly from our website. If you do not consent to the use of this tool when (first) accessing the website, none of your personal data will be processed using this tool.

The videos are integrated in “privacy-enhanced mode”, which means that personal data about you as a user is only transmitted to YouTube when you play the videos. We have no influence over the transmission of this data. Data is transferred regardless of whether you are logged in via a user account provided by YouTube or no such account exists. If you are logged in to Google at the same time, your data will be assigned directly to your account. If you do not wish the data to be associated with your YouTube profile, you must log out before activating the plugin. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or tailoring its website to users’ needs. Such analysis is carried out in particular (even for users who are not logged in) for the purpose of providing targeted advertising and informing other users of the social network about your activities on our website.

You can deactivate the use of YouTube on our website with regard to your personal data in the consent management tool on our website (see the following LINK).
The legal basis for the aforementioned processing of your personal data is Art. 6 (1) sentence 1 lit. a GDPR (consent).

In connection with the processing of data described above, processing may also be carried out by Google in the USA. Currently, the EU Commission has not issued a comprehensive decision on the adequacy of the level of data protection in the USA. In order to ensure a sufficient level of data protection, standard data protection clauses are used (by Google) in this respect within the meaning of Art. 46 (2) lit. c GDPR.

d. Webfonts
Our website uses fonts provided by Monotype Imaging Holdings Inc. (600 Unicorn Park Drive, Woburn, Massachusetts 01801 USA). This may involve data processing similar to that described above under 3.1. In principle, where such fonts are integrated, MyFonts is informed that the fonts used were accessed via our website. None of the user’s personal data is transmitted to MyFonts. You can find more information here: https://www.monotype.com/.

The legal basis for the aforementioned processing of personal data is Art. 6 (1) sentence 1 lit. f GDPR (legitimate interests; the legitimate interests are described above under 3.1 – enabling the use of the website) in conjunction with Sec. 25 (2) no. 2 TDDDG.

4. Duration of data storage

Insofar as no other storage period is required on the basis of other provisions in this privacy notice, your personal data will generally only be stored for as long as it takes to fulfil the specific processing purpose, and thereafter only to the extent and insofar as we are obliged to do so under the statutory retention requirements. If we no longer require your data for the purposes described above, it will only be stored during the respective statutory retention period and will not be processed for other purposes.

5. Disclosure of personal data
In general, the personal data collected when using the website will – unless other cases expressly described in this privacy notice apply – not be passed on or transmitted in any other way to third parties without your consent.
We may disclose your personal data to third parties if we are legally obliged to do so (e.g. at the request of a court or law enforcement agency). The legal basis for such processing is Art. 6 (1) sentence 1 lit. c GDPR (legal obligation).

We also use technical service providers who process personal data on our behalf (e.g. IT service providers). These service providers process the corresponding personal data exclusively according to our instructions (data processors; Art. 28 GDPR).

6. Your privacy and data protection rights
You can request information about the data stored about you, its origin and recipients as well as the purpose of storage. In addition, you can request to have your data corrected if it is incorrect or incomplete. You may be entitled to have your data deleted or blocked if the collection, processing or use of the data proves to be inadmissible or no longer necessary. You may also have a right to restrict the processing of your data and a right to receive a copy of the data you have provided in a structured, commonly used and machine-readable format.
You have the right to object to the processing of your personal data for the purposes of direct advertising and/or market and opinion research.
If we process your data for the purposes of legitimate interests, you can object to this processing if there are grounds relating to your particular situation against the processing of the data.
You can exercise your rights by contacting the above address of the data controller.
You also have the option of directing a complaint to the Data Protection Officer named above or a data protection supervisory authority. The competent data protection supervisory authority for this website is:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Kavalleriestr. 2 – 4
40213 Düsseldorf

7. Data security
GRE takes significant technical and organisational precautions to protect your personal data from loss, falsification or unauthorised access. Such measures are adapted to the current state of the art in each case.
In the event that you wish to contact us by email, we would like to point out that the confidentiality of the information transmitted cannot necessarily be guaranteed, as the content of unencrypted emails may be intercepted by unauthorised third parties during transmission. Most email providers already use automatic transport encryption procedures to maintain confidentiality in email traffic. Please check with your email provider whether they also use the TLS protocol. Otherwise, you should consider switching to an email provider with TLS support to ensure a sufficient level of encryption.

8. Amendment of the privacy notice
We reserve the right to amend this privacy notice at any time without notice. You can find an up-to-date version on our website at any time.