The security and privacy of our website visitors - hereinafter referred to as users - is our top priority. We undertake to process all data made available to us strictly in accordance with the provisions of the General Data Protection Regulation (EU GDPR) and the relevant data protection laws and regulations of the EU member states. This applies in particular to personal data.
Definitions
This privacy policy uses terms that are defined in accordance with Art. 4 GDPR. According to Art. 4 No. 1 GDPR, personal data is all information that relates to an identifiable natural person. The term "processing" (Art. 4 No. 2 GDPR) covers all possible types of use of personal data, from collection to destruction.
Data processing when accessing the website
Data processing when accessing the website
Our website is hosted by SiteGround Spain SL, Calle de Prim 19, 28004 Madrid, Spain. The web host is subject to the provisions of the EU GDPR and other relevant data protection laws. A contract for order processing in accordance with Art. 28 GDPR has been concluded in order to process the data in accordance with the data protection regulations and not to pass it on to third parties. Users can find further information on data processing by the web host at https://de.siteground.com/viewtos/siteground_plugins_privacy_notice?scid=3&lang=de_DE
Every time you visit our website, data is collected and saved in the log files of the server and the web application. The usage data collected includes the user's IP address, the date and time of the visit, the URL of the website from which the user reached the current page (referrer), the browser type and version, and the user's operating system.
The log files are stored to ensure the functionality of the website and for statistical purposes to optimize the user experience. The data is processed based on our legitimate interests in accordance with Art. 6 Para. 1 Clause 1 f.) GDPR. We guarantee that this data will not be merged with other sources. The log files are stored separately from the user's personal data collected via form entries. The log files are deleted in accordance with our general principles for data deletion.
Data processing through cookies
Cookies are used on this website. They are small text files that are stored on the operator's web server or on the user's platform (PC, tablet, smartphone, etc.). These cookies enable the website to recognize and identify the user's Internet browser.
Both session cookies and temporary cookies are used. Session cookies are stored for the duration of the visit to the website and are automatically deleted as soon as the user closes the browser. They only contain a characteristic string of characters that enables the browser to be uniquely identified. Temporary cookies are also stored on the user's platform and can be deleted at any time via the Internet browser.
The use of cookies makes it easier for users to use the website. Data processing is carried out on the basis of our legitimate interests in accordance with the GDPR. Users can prevent or restrict the storage of cookies in the settings of their Internet browser. Cookies that have already been stored can also be deleted via the browser. However, please note that this may affect the usability of the website.
Data processing using JavaScript libraries
This website uses JavaScript libraries from external providers that enable certain functions and thus improve user-friendliness. It is possible that personal data will be transferred to these providers when the website is accessed. The processing is carried out within the scope of our legitimate interests in accordance with the GDPR. Users can prevent data transfer by deactivating JavaScript using a browser plug-in such as "NoScript". Please note that this may affect the use of the website.
Request broker recommendations
Visitors can request free broker recommendations using special forms. In addition to information about the property, name, email address and telephone number are also requested. In addition, the date and time of the request and general usage data are recorded. This data is used exclusively to process the request and is required for (pre-)contractual obligations. The data is forwarded to a maximum of three selected cooperation partners in order to process the request and make contact.
The requested data is processed in accordance with the data protection regulations (Art. 6 Para. 1 Clause 1 b.) and f.) GDPR). The data is deleted in accordance with our guidelines.
Emails are sent via "Mailgun", a US provider. This provider is Privacy Shield certified and therefore guarantees compliance with data protection laws. We have also concluded a data processing agreement with Mailgun to ensure the secure processing of your data. You can find more information about data processing on Mailgun's data protection page.
Responsible for processing in accordance with data protection regulations is:
Sole proprietorship Dennis Lorenz
Zweibrücker Str. 6a, 13583 Berlin
Phone: +49 177 250 26 33
Email: info@delux-makler.de
Data processing Contact form
When the user contacts us via the website's contact forms, the following data is required: name, email address and message as well as the general data registered when the website is accessed (see "Data processing when the website is accessed"). In addition to the voluntary information, the data is processed exclusively for the purpose of processing the contact request.
The processing of the mandatory data is carried out on the basis of Art. 6 Para. 1 Sentence 1 b.) and Art. 6 Para. 1 Sentence 1 f.) GDPR, and also on the basis of Art. 6 Para. 1 Sentence 1 a.), 7 GDPR. The data is deleted according to general principles (see “General information on the deletion of data”).
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA - hereinafter referred to as Google. Google Analytics also uses so-called "cookies", which are stored on the user's platform and enable an analysis of website visits. The data generated by the cookie is usually transferred to a Google server in the USA and stored there.
Google uses the data on behalf of the operator of this website to evaluate the use of the website, to compile reports on website activity and to provide other services related to the use of this website. The Internet protocol address (IP address) transmitted by Google Analytics will not be merged with other Google data.
Google is Privacy Shield certified (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI), which guarantees compliance with the EU GDPR and all other data protection laws or provisions of a data protection nature applicable in the EU member states. In addition, the operator has concluded a data processing agreement with Google. This is a contract in which Google undertakes to protect the transmitted data, to process it in accordance with the data protection regulations on behalf of the operator of this website and, in particular, not to pass it on to third parties.
The operator of this website only uses Google Analytics with activated IP anonymization. This means that the Internet protocol address (IP address) transmitted by Google is shortened within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area before transmission. Only in exceptional cases will the unabridged IP address be transmitted to a Google server in the USA and shortened there.
The data processing is carried out on the basis of legitimate interests within the meaning of Art. 6 Para. 1 Clause 1 f.) GDPR. The data is required to enable the correct display of the website and to continuously optimize the website for the benefit of the user.
The user can prevent or restrict the storage of cookies at any time by making the appropriate settings in his or her Internet browser. The operator points out that this option may limit the usability of the website. The user can also prevent data processing by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de. Users can find further information on data processing at http://www.google.com/analytics/terms/de.html or by https://www.google.de/intl/de/policies/.
Google Fonts
This website also uses external fonts from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 (USA). The fonts are integrated by calling a server at Google. The data processing is carried out on the basis of legitimate interests within the meaning of Art. 6 Para. 1 Clause 1 f.) GDPR. The use of fonts makes it easier for the user to use this website and optimizes the presentation of the website. Google is certified as Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI), which guarantees compliance with the EU GDPR and all other data protection laws or provisions of a data protection nature applicable in the EU member states. Users can find further information on data processing at https://www.google.com/policies/.
## Shariff method for social media plugins
This website allows blog posts to be shared on Twitter, Facebook and Google+ via share buttons using the so-called 'Shariff' method. With this solution, direct contact between the user and the social media portal is only established when the user actively clicks on the share button. Clicking on the share button therefore represents a declaration of consent by the user to the transmission of data to the respective social media portal, which is described below under the headings 'Facebook', 'Twitter' and 'Google+'. Users can find further information on 'Shariff: Social media buttons with data protection' at https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html. The purpose of sharing blog posts is to analyze user behavior and thereby optimize the website for the benefit of the user. The data processing is carried out on the basis of legitimate interests within the meaning of Art. 6 Para. 1 Clause 1 f.) GDPR, after clicking on the share button additionally on the basis of Art. 6 Para. 1 Clause 1 a.), 7 GDPR.
The operator of this website points out that after clicking on the Twitter button, data about the user and his website visit will be exchanged with the Twitter server. Twitter is a social media portal of the company Twitter Inc. 795 Folsom St., Suite 600, San Francisco, CA 94107 (USA). If the user is a member of Twitter and is logged in to Twitter, information about his website visit will also be assigned to his user profile on Twitter. The operator of this website is not informed about the content of the exchanged data. https://twitter.com/privacy the user receives further data protection information with detailed information about the collection and use of data by Twitter.
The operator of this website points out that after clicking on the Facebook button, data about the user and his website visit will be exchanged with the Facebook server. Facebook is a social media portal of the company Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025 (USA). If the user is a member of Facebook and logged in to Facebook, information about his website visit will also be assigned to his user profile. The operator of this website is not informed about the content of the exchanged data. https://www.facebook.com/policy.php the user receives further data protection information with detailed information about the collection and use of data by Facebook.
Google+
The operator of this website points out that after clicking on the Google+ button, data about the user and his website visit will be exchanged with the Google server. Google+ is a social media portal of the company Google Inc. Mountain View, CA (USA). If the user is a member of Google+ and logged in to Google+, information about his website visit will be assigned to his user profile on Google+. The operator of this website is not informed about the content of the exchanged data. https://www.google.com/intl/de/+/policy/+1button.html the user receives further data protection information with detailed information about the collection and use of data by Google.
Google Marketing and Remarketing
The operator of this website uses marketing and remarketing services from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Marketing and remarketing services allow the operator to display advertisements for and on the website in a more targeted manner in order to only present users with advertisements that potentially correspond to their interests. For these purposes, when websites on which marketing and remarketing services are active are accessed, cookies or similar technologies that are recognized by other sites (e.g. google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com) are stored on the user's platform. As a rule, it is noted which websites the user has visited, which content he is interested in and which offers he has clicked on, as well as the IP address, technical information about the browser and operating system, referring websites, time of visit and other information about the use of the online offer.
The data generated by remarketing services provided by Google is usually transferred to a Google server in the USA and stored there. Please also refer to the information in connection with Google Analytics (see “Google Analytics”). The data processing is carried out on the basis of legitimate interests within the meaning of Art. 6 Para. 1 Clause 1 f.) GDPR. Users can obtain further information on the use of data for marketing purposes by Google at https://policies.google.com/technologies/ads and https://policies.google.com/privacy.
General information on deletion of data
Personal data is generally deleted immediately after the purpose of storage has been fulfilled, unless the statutory retention periods stipulate extended storage (cf. Section 257 Para. 1 HGB: 6 years, Section 147 Para. 1 AO: 10 years) or storage is required for evidential purposes. Log files are usually deleted after 7 days at the latest. Proper deletion is checked on an annual basis. If the data is not deleted because it is required for other legally permissible purposes, its processing will be restricted.
Operator’s security measures
In accordance with Art. 32 GDPR, the operator continually takes suitable organizational, contractual and technical measures to ensure that the data protection provisions are complied with and to protect the data that is the subject of the data processing against accidental or intentional manipulation, loss, destruction or access by unauthorized persons, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the data processing as well as the different likelihood of occurrence and severity of the risk to the rights and freedoms of the data subjects, in order to ensure that the data protection provisions are protected. The operator has already taken the protection of personal data into account in the technical development and design of the website (Art. 25 GDPR). The security measures include in particular the encrypted transmission of data between the user's browser and the operator's server.
User rights
The user has the right at any time to request information about whether and which personal data of the user are processed (Art. 15 GDPR). Upon request, the user's personal data must be provided in a structured, common and machine-readable format (Art. 20 GDPR).
Furthermore, the user has the right to have inaccurate personal data rectified or incomplete personal data completed (Article 16 GDPR) and – under the conditions of Article 18 GDPR – the right to restrict processing.
Unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims, the user can also request the deletion of his or her personal data (Art. 17 GDPR).
Consent to data processing within the meaning of Art. 6 Para. 1 Clause 1 a.), 7 GDPR can be revoked by the user at any time with effect for the future. If the data processing is carried out on the basis of Art. 6 Para. 1 Clause 1 f.) GDPR, the user can object to the data processing with effect for the future, unless the operator of this website can demonstrate compelling legitimate reasons for the processing which outweigh the interests, rights and freedoms of the user, or the processing serves to assert, exercise or defend legal claims of the operator of the website (Art. 21 GDPR).
