PRIVACY POLICY

We are pleased that you are visiting our website and about your interest in our company and our products and services.

We consider data protection to be a client-orientated quality feature. The protection of your personal data is very important to us, especially in terms of protecting your right to privacy. If you provide us with your personal data, we will treat this with customary banking diligence and in accordance with the provisions of applicable data protection law.

We would like to inform you here about the types of personal data concerning you that we collect when you visit our website and the purposes for which we collect this information.

The entity responsible for the lawful processing of your data is Union Investment Real Estate GmbH, Valentinskamp 70 / EMPORIO, D-20355 Hamburg.

1 Data you transfer to us

During your visit to our website, we process information such as your IP address and browser data to ensure the security and stability of the system. The legal basis for processing this data is Article 6(1)(f) of the GDPR.

Data that you send to us via a contact form will be – depending of the subject of your enquiry – be forwarded for further processing. In order to so we use external service providers (e.g. property managers or agents), which are chosen carefully and guarantee a high security standard.

This data is only used to answer your questions or fulfil your request for information, and to provide you with your desired information using, where necessary, a dispatch service provider which is bound by an obligation of confidentiality. Beyond that your data will not be disclosed to third parties. The legal grounds for processing the data described above are provided in Article 6(1) (f) of the GDPR.

The protection of your personal data is very important to us. For this reason, technical and organisational measures are taken to provide appropriate safeguards for the data and around the editing of the content. Your data will be stored on specially protected computers. Reading and further processing of your data is, firstly, subject to strict internal regulations and, secondly, is only carried out for the purpose for which you have given it to us.

2 Cookies and web analysis tools

Our website uses cookies. Cookies are small text files that are saved on the user’s drive and exchange certain settings and data with our systems through the user’s browser. Usually a cookie contains the name of the domain sending the cookie data, information about the lifetime of the cookie and an alphanumeric identifier. Cookies make it possible for us to lay out our website so that you find it appealing and easier to use, for instance, by saving certain information that you provide so you do not need to re-enter it.

You can disable or restrict the transfer of cookies by changing the settings in your Internet browser. You can delete stored cookies at any time. This process can also be automated. If cookies are deactivated for our website, you may not be able to use the full functionality of the website.

The following link allows you to configure your privacy settings in our consent management tool: Configure privacy settings

2.1 Usercentrics

To enable you to manage your consents yourself on our website, we use a consent management service provided by Usercentrics GmbH, Sendlingerstr. 7, 80331 Munich. Usercentrics GmbH is the recipient of your data within the meaning of Article 13(1)(e) of the GDPR. Consent data includes the following: date and time of visit, consent or rejection, and device information.

The data is processed for the purpose of complying with statutory requirements and the associated documentation or obligation to provide evidence of consents (Article 7(1) of the GDPR) and thus on the basis of Article 6(1)(c) of the GDPR.

Local storage is used to store data. Consent data is stored for 1 year in the European Union. Further information on the data collected and options for getting in touch are available directly at Usercentrics under https://usercentrics.com/privacy-policy/.

2.2 Webtrekk

To collect statistical data regarding the usage of our Web offering and to optimise our offering based on that data, we use services provided by Webtrekk GmbH (‘Webtrekk’), Robert-Koch-Platz 4, 10115 Berlin. Webtrekk has been certified by TÜV Saarland for data protection in the category Web Controlling Software.

Using this Webtrekk technology, a ‘pixel’ collects and stores data for optimisation purposes. Your anonymised IP address, date and time of visit, device information, referrer URL and browser information are processed. Usage profiles are generated from this data under a pseudonym. Cookies may also be used for this, though they only collect and store data using pseudonyms. You have the option of configuring your browser to inform you as soon as cookies are about to be saved so that you can reject them, if desired.

By default, we only allow cookies that last a maximum of six months.

Please note that Webtrekk may transfer data to a third country that does not provide an appropriate level of data protection that is comparable to the requirements of the GDPR. If the data is transferred to the USA, there is the risk that your data may be processed by US authorities for control and monitoring purposes, possibly without you being entitled to any legal remedies.

The legal basis for processing the data is Article 6(1)(a) of the GDPR. You have the right to withdraw your consent at any time.

2.3 Youtube

We use the video platform of YouTube LLC (901 Cherry Ave., San Bruno, CA 94066, USA) to embed videos stored on YouTube.com into our website, where they can be played directly. YouTube is a company affiliated with Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; subsidiary: Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).

The YouTube videos are integrated in “extended data protection mode”. This means that no data about you as a user is transferred to YouTube if you do not play the videos. The data referred to below will only be transferred if you play the videos. We then have no influence over this data transfer.

When you visit the website, YouTube receives information that includes notification that you have accessed the relevant sub-page of our website. Basic data such as IP address and time stamp are also transferred. This occurs regardless of whether YouTube provides a user account through which you are logged in, or whether a user account even exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish the data to be associated with your YouTube profile, you need to log out before activating the button. YouTube stores your data as usage profiles and uses it for the purposes of advertising, market research and/or ensuring that its website meets user needs. You have the right to object to the creation of user profiles by YouTube. You also have the option of configuring your browser to inform you as soon as cookies are about to be saved so that you can reject them, if desired.

We have no influence over the way Google subsequently uses the collected data. In addition to Google, Alphabet Inc. also receives the collected data. Further information on the purpose and scope of data collection, and on your rights and your settings options for protecting your privacy, is available at: www.google.com/intl/de/policies/privacy and services.google.com/sitestats/de.html. The cookie policy can be viewed at: https://policies.google.com/technologies/cookies?hl=en

The information collected is stored on Google servers, including in the US, and processed there. According to information provided by Google, it uses the standard contractual clauses approved by the European Commission. Their purpose is to ensure compliance with an adequate level of data protection in a third country.

The legal basis for processing the data is Article 6(1)(a) of the GDPR. You have the right to withdraw your consent at any time.

2.4 Vimeo

We use videos from Vimeo LLC (555 West 18th Street, New York 10011, USA) on our website. Vimeo enables us to present high-quality content directly on our website, where you can watch it right away.

When you visit a page on our website that has a Vimeo video embedded in it, your browser connects to Vimeo’s servers, resulting in data being transferred. This data is collected, stored and processed on Vimeo servers. Vimeo collects data about you, regardless of whether you have a Vimeo account. This includes your IP address, technical information about your browser type, operating system, and very basic device information. Vimeo also stores information about which website you use to access the Vimeo service and what actions (web activities) you carry out on our website. These web activities include duration of session, bounce rate and the button on which you clicked in our website that has an integrated Vimeo function. These activities may be tracked and stored by Vimeo, using cookies and similar technologies. If you are logged in to Vimeo as a registered member, more data may be collected because it is possible that more cookies have already been set in your browser. In addition, your activities on our website will be linked directly to your Vimeo account. To prevent this, you must be logged out of Vimeo during your visit to our website.

You have the option of managing cookies in your browser to suit your own requirements. If you do not want Vimeo to set cookies and collect information about you, for example, you can delete or deactivate cookies in your browser settings at any time. Please note that if you deactivate/delete cookies, some functions may no longer be fully available. If you are a registered Vimeo member, you can also manage the cookies in Vimeo’s settings.

We have no influence over the way in which Vimeo subsequently uses the collected data. Google Analytics, Vimeo and service partners are recipients of the collected data. For more information on the privacy policy and cookie policy, please see https://vimeo.com/privacy and https://vimeo.com/cookie_policy.

Please note that Vimeo may transfer data to a third country that does not provide an appropriate level of data protection that is comparable to the requirements of the GDPR. If the data is transferred to the USA, there is the risk that your data may be processed by US authorities for control and monitoring purposes, possibly without you being entitled to any legal remedies.

The legal basis for processing the data is Article 6(1)(a) of the GDPR. You have the right to withdraw your consent at any time.

If these cookies are not used, it would not be possible to access the registration forms and thus to register for our marketing mailings. Likewise, existing data could not be processed in the subscription centre (management of newsletter subscriptions or updating of personal data).

3 Disclosure of your data to third parties

For certain processes associated with the processing of data, we draw on the support of external service providers. We select these service providers carefully and they meet high standards for data privacy and security. They are bound to strict secrecy and process data only when we contract them and in accordance with our instructions. The legal basis for passing on personal data in this context is Article 28 of the GDPR. With the exception of the situations explained in this privacy notice, we only disclose your data to third parties without your explicit consent when we are required to do so by law or by order of a public authority or court.

4 Duration of storage

Your personal data will be erased when it is no longer required for the specified purposes and legal retention periods have expired.

5 Rights regarding stored personal data

In accordance with Article 15 of the GDPR, you have the right to request information on the personal data stored about you. If you discover that your stored personal data is inaccurate or incomplete, you have the right at any time to obtain rectification of inaccurate data or completion of incomplete data without undue delay in accordance with Article 16 of the GDPR. Under the conditions set out in Article 17(1) and Article 18(1) of the GDPR, you also have the right to obtain the erasure or restriction of processing of personal data.

If your data has been processed on the basis of consent (Article 6, Section 1(a), GDPR) or a contract (Article 6, Section 1(b), GDPR), you have the right according to Article 20 of the GDPR to receive the data you provided in a structured, commonly used and machine-readable format and to have this data transmitted to a third party. If you have given your consent (Article (6)(1)(a) of the GDPR), you have the right to withdraw your consent at any time. If your data was processed on the basis of a legitimate interest (Article 6 (1)(f) of the GDPR), you have the right to object at any time according to Article 21 of the GDPR.

If you have complaints about the use of data, you can also contact the competent supervisory authority.

We reserve the right to update or supplement this policy as necessary (if new products and services are offered by the respective companies of the Union Investment Group or if there are further developments to Internet and IT security technology). Any amendments will be published on this page.

Last update of this privacy policy: September 2022