1. Information requirements under Article 13 of the GDPR regarding data processing on this website
General information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally.
Name and contact details of the data controller
The data controller is
Die Stadtfelder Wohnungsgenossenschaft eG, Peter-Paul-Str. 32, 39106 Magdeburg
. Please refer to the legal notice for the electronic contact details.
Contact details of the Data Protection Officer
If you have any questions regarding the processing of your data, you can contact our Data Protection Officer, who will be happy to assist you with any requests for information, suggestions or complaints.
Data Protection Officer at Die Stadtfelder Wohnungsgenossenschaft eG
: Joelle Müns, Peter-Paul-Str. 32, 39106 Magdeburg
datenschutz@diestadtfelder.de
When you use this website, various items of personal data are collected. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done. Please note that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. It is not possible to guarantee complete protection of data against access by third parties.
Your data is collected, on the one hand, when you provide it to us. This may include, for example, data that you enter into a contact form.
Other data is collected automatically by our IT systems when you visit the website. This consists primarily of technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you access our website. Some of the data is collected to ensure the website functions correctly. Other data may be used to analyse your user behaviour.
When you visit our website, your browsing behaviour may be analysed for statistical purposes. This is primarily done using cookies and so-called analytics tools. The analysis of your browsing behaviour is generally carried out anonymously; your browsing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. For further details, please refer to our privacy policy under the heading ‘Third-party modules and analytics tools’.
We process data on the basis of a legitimate interest pursuant to Article 6(1)(f) of the GDPR for the purpose of ensuring the system security of the website and improving the website in terms of its structure and content.
Enquiries from third parties regarding the protection of a third party’s legitimate interest will be answered by Die Stadtfelder Wohnungsgenossenschaft eG, provided that the third party declares the existence of a legitimate interest and confirms that no legitimate interests of the data subject preclude such disclosure.
The data processed is made available to recipients solely for the specified purpose, in accordance with the principle of data minimisation:
• Employees of Die Stadtfelder Wohnungsgenossenschaft eG who are responsible for the operation of the website.
• IT service providers responsible for the operation, upkeep and maintenance of the website.
Data processing takes place exclusively within the Member States of the European Union. There are no plans to transfer data to third countries. Please also see the section ‘Third-party modules and analytics tools’.
Log data relating to website usage is retained on our server for a maximum of 90 days. Please also see the section ‘Third-party modules and analytics tools’.
Every data subject has inalienable rights under
• Article 15: Right of access to data processing
• Article 16: Right to rectification of data
• Article 17: Right to erasure (‘right to be forgotten’)
• Article 18: Right to restriction of processing•
Article 20: Right to data
portability• Article 77 of the GDPR in conjunction with Section 19 of the BDSG: Right to lodge a complaint with the competent supervisory authority
. These rights, as well as the right to object set out below, may generally be exercised in writing, either directly with the data controller or by contacting the data protection officer.
Right to object to data collection in specific cases and to direct marketing (Article 21 of the GDPR)
Where data processing is carried out on the basis of Article 6(1)(e) or (f) of the GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on these provisions. The specific legal basis on which processing is based can be found in this privacy policy.
If you object, we will no longer process your personal data in question, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims (objection under Article 21(1) of the GDPR).
If your personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will no longer be used for the purposes of direct marketing (objection under Article 21(2) of the GDPR).
Consent given for the processing of data may be withdrawn at any time, with effect for the future. This does not affect the lawfulness of the data processing carried out up to the point at which the withdrawal is received.
Any data subject has the right to lodge a complaint regarding data processing with the Data Protection Officer of Die Stadtfelder Wohnungsgenossenschaft eG. The Data Protection Officer must maintain confidentiality regarding the identity of the complainant vis-à-vis Die Stadtfelder Wohnungsgenossenschaft eG.
In the event of breaches of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the State Data Protection Commissioner of the federal state in which our company is based. A list of data protection officers and their contact details can be found via the following link:
https://www.ob-m.de/infos/aufsichtsbehoerden-der-bundeslaender.
The provision of personal data is required solely for the purpose of concluding a contract or entering into contract negotiations. If data is not clearly marked as voluntary and the processing is not based on consent, Die Stadtfelder Wohnungsgenossenschaft eG will be unable to provide the intended service should you refuse to consent to the processing of your data.
Any data marked as voluntary may be left blank without this affecting the fulfilment of the contract.
There is no automated decision-making, including profiling.
Any further processing for a purpose other than the performance of the contract shall be carried out solely to comply with statutory retention and record-keeping obligations.
For security reasons and to protect the transmission of confidential information – such as orders or enquiries that you send to us as the website operator – this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar in your browser changes from “http://” to “https://” and by the padlock icon in your browser bar.
When SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.
We hereby object to the use of contact details published in accordance with the legal requirement to provide an imprint for the purpose of sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.
2. Hosting
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact enquiries, metadata and communication data, contractual data, contact details, names, website visits and other data generated via a website.
The use of the hosting provider is for the purpose of fulfilling our contractual obligations towards our potential and existing customers (Article 6(1)(b) of the GDPR) and in the interests of ensuring the secure, fast and efficient provision of our online services by a professional provider (Article 6(1)(f) of the GDPR).
Our hosting provider will only process your data to the extent necessary to fulfil its service obligations and will follow our instructions regarding this data.
We use the following web hosting provider: HostPress GmbH, Bahnhofstraße 34, 66571 Eppelborn
3. Third-party modules and analysis tools
If you contact us by email, telephone or fax, your enquiry, including all personal data contained therein (name, enquiry), will be stored and processed by us for the purpose of dealing with your request. We will not disclose this data without your consent.
The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), provided that this has been requested. The data you send to us via contact enquiries will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.
If we are unable to make you a job offer, if you decline a job offer or if you withdraw your application, we reserve the right to retain the data you have provided, on the basis of our legitimate interests (Article 6(1)(f) of the GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed. The data is retained in particular for evidential purposes in the event of a legal dispute. If it becomes apparent that the data will be required after the 6-month period has expired (e.g. due to an imminent or pending legal dispute), the data will not be deleted until the purpose for its continued retention no longer applies.
Data may also be retained for a longer period if you have given your consent (Article 6(1)(a) of the GDPR) or if statutory retention obligations prevent deletion.
Inclusion in the candidate pool
If we do not make you a job offer, there may be the option of adding you to our candidate pool. If you are included, all documents and details from your application will be transferred to the candidate pool so that we can contact you should suitable vacancies arise.
Inclusion in the candidate pool is based solely on your explicit consent (Article 6(1)(a) of the GDPR). Giving your consent is voluntary and is not linked to the current application process. The data subject may withdraw their consent at any time. In this case, the data in the candidate pool will be irrevocably deleted, provided there are no legal grounds for retention.
The data in the candidate pool will be irrevocably deleted no later than two years after consent is given.
You can prevent Google from collecting and processing your data by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Further information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Our website uses what are known as ‘cookies’. Cookies are small text files and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.
In some cases, cookies from third-party companies may also be stored on your device when you visit our site (third-party cookies). These enable us or you to use certain services provided by the third-party company (e.g. cookies for processing
payment services).
Cookies serve various purposes. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies are used to analyse user behaviour or to display advertising.
Cookies that are required to carry out the electronic communication process, to provide certain functions you have requested (e.g. the shopping basket function) or to optimise the website (e.g. cookies for measuring website traffic) (necessary cookies), are stored on the basis of Article 6(1)(f) of the GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically fault-free and optimised provision of its services. Where consent has been sought for the storage of cookies and similar recognition technologies, processing takes place exclusively on the basis of this consent (Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG); consent may be withdrawn at any time.
You can configure your browser so that you are notified when cookies are set and can allow cookies only on a case-by-case basis, block the acceptance of cookies in specific cases or generally, and enable the automatic deletion of cookies when you close your browser. If you disable cookies, the functionality of this website may be restricted.
Where cookies are used by third parties or for analytical purposes, we will inform you of this separately within this privacy policy and, where necessary, seek your consent.
Consent via Borlabs Cookie
Our website uses the consent technology provided by Borlabs Cookie to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies, and to document this in accordance with data protection regulations. The provider of this technology is Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg (hereinafter ‘Borlabs’).
When you visit our website, a Borlabs cookie is stored in your browser, which records the consents you have given or any withdrawal of these consents. This data is not passed on to the provider of Borlabs Cookie.
The data collected is stored until you request its deletion, delete the Borlabs cookie yourself, or the purpose for which the data was stored no longer applies. Mandatory statutory retention periods remain unaffected. Details on data processing by the Borlabs cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.
Borlabs’ cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6(1)(c) of the GDPR.
Server log files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: This data is not combined with other data sources.
The collection of this data is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in ensuring the technically error-free display and optimisation of its website – for this purpose, the server log files must be collected.
We use Hotjar to better understand our users’ needs and to optimise the content and experience on this website. Hotjar’s technology helps us gain a better understanding of our users’ experiences (e.g. how much time users spend on which pages, which links they click on, what they like and dislike, etc.), and this helps us tailor our content based on user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices, in particular the device’s IP address (which is only collected and stored in anonymised form whilst you are using the website), screen size, device type (unique device identifiers), information about the browser used, location (country only), and the preferred language for displaying our website. Hotjar stores this information on our behalf in a pseudonymised user profile. Hotjar is contractually prohibited from selling the data collected on our behalf. Further information can be found in the ‘About Hotjar’ section on Hotjar’s help page.
This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, time spent on the site, operating systems used and the user’s location. This data is aggregated into a user ID and assigned to the website visitor’s respective device.
Furthermore, Google Analytics enables us, amongst other things, to record your mouse and scroll movements and clicks. Google Analytics also uses various modelling approaches to supplement the collected data sets and employs machine learning technologies in its data analysis.
Google Analytics uses technologies that enable the user to be recognised for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google regarding the use of this website is generally transmitted to a Google server in the USA and stored there.
The use of this analytics tool is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. Where consent has been sought, processing takes place exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.
Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
We have entered into a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.
Data stored by Google at user and event level that is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android Advertising ID) is anonymised or deleted after 38 months. Further details can be found at the following link:
https://support.google.com/analytics/answer/7667196?hl=de.
This website uses the ‘demographic characteristics’ feature of Google Analytics to display relevant adverts to website visitors within the Google advertising network. This enables the creation of reports containing information on the age, gender and interests of site visitors. This data is derived from Google’s interest-based advertising and from visitor data provided by third parties. This data cannot be linked to any specific individual. You can disable this feature at any time via the ad settings in your Google Account, or generally prevent Google Analytics from collecting your data as described in the section ‘Objecting to data collection’.
This site uses the Google Maps mapping service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
In order to use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this website has no influence over this data transfer. When Google Maps is activated, Google may use Google Web Fonts to ensure consistent font display. When you access Google Maps, your browser loads the required web fonts into its cache to display text and fonts correctly.
The use of Google Maps is in the interests of presenting our online services in an appealing manner and ensuring that the locations specified on our website can be easily found. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. Where consent has been sought, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.
Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Further details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
Further information on the handling of user data can be found in Google’s Privacy Policy: https://policies.google.com/privacy?hl=de.
We have enabled the IP anonymisation feature on this website. This means that Google truncates your IP address within the Member States of the European Union or in other signatory states to the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google.
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that enables us to integrate tracking or analytics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies or carry out any independent analyses. It serves solely to manage and deliver the tools integrated via it. However, Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.
The use of Google Tag Manager is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in the quick and straightforward integration and management of various tools on its website. Where consent has been sought, processing takes place exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.
This page uses so-called web fonts, provided by Google, to ensure consistent font display. The Google Fonts are installed locally. No connection is made to Google’s servers.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.
If you send us enquiries via the contact form, the details you provide in the enquiry form – including the contact details you enter there – will be stored by us for the purpose of processing your enquiry and in the event of any follow-up questions. We will not pass on this data without your consent.
The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), provided that this has been requested.
The data you enter in the contact form will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory legal provisions – in particular retention periods – remain unaffected.
We use your address, in compliance with all legal provisions, to send you postal advertising.
The legal basis for this is our legitimate interest in direct marketing pursuant to Article 6(1)(f) in
conjunction with Recital 47 of the GDPR. Where consent has been sought, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR; consent may be withdrawn at any time. More specific provisions may be communicated to you at the time of data collection and, where applicable, shall take precedence over this provision.
We will retain your address until the purpose for which the data is processed no longer applies. If you make a legitimate request for erasure or withdraw your consent to direct mail, your data will be erased, provided we have no other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these grounds no longer apply.
We have integrated ProvenExpert review badges on this website. The provider is Expert Systems AG, Quedlinburger Str. 1, 10589 Berlin, https://www.provenexpert.com.
The ProvenExpert seal enables us to display customer reviews submitted to ProvenExpert about our company on our website in the form of a seal. When you visit our website, a connection is established with ProvenExpert, allowing ProvenExpert to determine that you have visited our website. Furthermore, ProvenExpert records your language settings in order to display the seal in your chosen language.
The use of ProvenExpert is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in presenting customer reviews as transparently as possible. Where consent has been sought, processing takes place exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.
The content on this website can be shared on social media platforms such as Facebook, Twitter and others in accordance with data protection regulations. This site uses the sharing tool for this purpose. This tool only establishes a direct connection between the social media platforms and users once the user actively clicks on one of these buttons. Clicking on the button constitutes consent within the meaning of Article 6(1)(a) of the GDPR. This consent may be withdrawn at any time with future effect.
This tool does not automatically transfer user data to the operators of these platforms. If the user is logged in to one of the social networks, an information window will appear when using the social buttons for Facebook, Twitter and similar platforms, in which the user can confirm the text before submitting it.
Our users can share the content of this site on social networks in a manner that complies with data protection regulations, without the network operators creating comprehensive browsing profiles.
This website uses social media plugins (e.g. Facebook, Twitter, Instagram, Pinterest, XING, LinkedIn).
You can usually recognise the plugins by their respective social media logos. To ensure data protection on this website, we only use these plugins in conjunction with the ‘Shariff’ solution. This application prevents the plugins integrated into this website from transmitting data to the respective provider the moment you first visit the page.
Only when you activate the relevant plugin by clicking the corresponding button is a direct connection established to the provider’s server (consent). As soon as you activate the plugin, the relevant provider receives the information that you have visited this website using your IP address. If you are logged into your respective social media account (e.g. Facebook) at the same time, the relevant provider can associate your visit to this website with your user account.
Activating the plugin constitutes consent within the meaning of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG. You may withdraw this consent at any time with future effect.
We collect, process and use personal data only to the extent that it is necessary for the establishment, substance or amendment of the legal relationship (master data).
This is done on the basis of Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures. We collect, process and use personal data relating to the use of our website (usage data) only to the extent necessary to enable the user to access the service or to bill them for it.
The customer data collected will be deleted upon completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.
Handling of applicant data
We offer you the opportunity to apply for a job with us (e.g. by email, post or via the online application form). Below, we provide information on the scope, purpose and use of your personal data collected as part of the application process. We assure you that the collection, processing and use of your data are carried out in accordance with applicable data protection law and all other statutory provisions, and that your data will be treated as strictly confidential.
Scope and purpose of data collection
When you submit an application to us, we process your associated personal data (e.g. contact and communication details, application documents, notes taken during interviews, etc.), to the extent necessary to decide whether to enter into an employment relationship. The legal basis for this is Section 26 of the German Federal Data Protection Act (BDSG) under German law (initiation of an employment relationship), Article 6(1)(b) of the GDPR (general pre-contractual processing) and – provided you have given your consent – Article 6(1)(a) of the GDPR. Consent may be withdrawn at any time. Your personal data will be disclosed within our company exclusively to those persons involved in processing your application.
If your application is successful, the data you have submitted will be stored in our data processing systems on the basis of Section 26 of the BDSG and Article 6(1)(b) of the GDPR for the purpose of carrying out the employment relationship.
If you wish to use the property agent service offered on the website, we will need your email address, as well as information that allows us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter. No further data is collected, or only on a voluntary basis. We use the service provider WP-Immomakler to process your property search.
4. Social media
This privacy policy applies to the following social media platforms:
- Facebook: https://www.facebook.com/diestadtfelder.wohnen
- Instagram: https://www.instagram.com/die_stadtfelder/
- LinkedIn: https://www.linkedin.com/company/die-stadtfelder-wohnungsgenossenschaft-eg
- Pinterest: https://www.pinterest.de/diestadtfelder
- YouTube: https://www.youtube.com/channel/UC7ECDtZ6CQRZl9upnb1tHDg
- X (formerly Twitter): https://twitter.com/diestadtfelder
Meta (Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter ‘Meta’), as the operator of Facebook, is solely responsible for the processing of personal data when you visit our Facebook page (hereinafter ‘fan page’). Please note that you use our fan page and its features at your own risk. This applies in particular to the use of interactive features (e.g. commenting, ‘Like’, sharing). When you visit our Facebook page, your data is processed as follows:
Personal data:
- We do not process any personal data simply as a result of you visiting our fan page. In particular, we do not operate the servers on which the fan page’s content and associated communications are stored and processed.
- If you contact us via our fan page, we will process your message and will be able to view your username and your current profile picture.
- When you access our fan page, your IP address is transmitted to Meta. According to Meta, this IP address is anonymised. Meta also stores information about users’ devices (e.g. as part of the ‘login notification’ feature). The data may also be transferred by Meta to countries outside the European Union. In particular, it is possible that some of the personal data collected may also be processed outside the European Union by Meta Platforms, Inc., which is based in the USA. We ourselves do not pass on any personal data.
- Meta sets out in detail which data it processes, for what purposes and on what legal basis, as well as the contact and configuration options available, in the legal basis for data processing at https://www.facebook.com/about/privacy/legal_bases and in Facebook’s Data Policy. This applies to all Meta products.
- We are not aware of how Meta uses the personal data generated from visits to fan pages for its own purposes, nor to what extent, if at all, Meta may link specific data to specific users.
Purposes and legal basis of the processing:
- We run this fan page to present content to you, to enable you to communicate with us, and to provide links to other interesting online content. The legal basis for the processing is Article 6(1)(f) of the GDPR.
Retention period:
- We will delete any messages sent in connection with our fan page as soon as the purpose for which they were stored has been fulfilled, you request that we delete them, or the purpose for storing them no longer applies. Messages subject to retention periods under commercial or tax law will be retained for 6 years.
Processing Page Insights
- Meta provides us with page summaries (known as Page Insights) for our fan page in anonymised form. Page Insights provide an overview of all key metrics within a specific time period. This enables us, for example, to learn more about our target audience and find out which content is most popular.
- Using Insights, we can only carry out anonymous analyses based on aggregated data regarding the use of our fan page. We do not collect any further data from visits to our fan page. This processing of personal data is carried out by Meta and us as joint controllers.
- If you are logged in to Facebook, there is a cookie on your device containing your Facebook ID. This enables Meta to track that you have visited our fan page and how you have used it.
- If you wish to avoid this, you should log out of Facebook or disable the ‘stay logged in’ function and delete the cookies stored on your device. This will delete any Facebook information that could be used to identify you directly. This allows you to use our fan page without your Facebook ID being revealed. If you access interactive features on the fan page (such as clicking ‘Like’, commenting, sharing or sending messages), a Facebook login screen will appear. Once you have logged in, Facebook will once again be able to recognise you as a specific user.
Purposes and legal basis of the processing:
- Data processing is carried out in accordance with Article 6(1)(f) of the GDPR. We have a legitimate interest in analysing visits to our fan page and using these insights to improve it.
- We have entered into a joint controller agreement with Meta, which sets out the allocation of data protection obligations between us and Meta. Essentially, the agreements with Meta regarding joint responsibility mean that requests for information and the exercise of other data subjects’ rights, in particular the right to object, should, where appropriate, be made directly to Meta. This is because, as the provider of the social network, Meta alone has direct access to the necessary information and can also take any necessary measures and provide information directly. Should our assistance nevertheless be required, we can be contacted at any time.
- Your right to assert such claims directly against us remains unaffected.
- Further details on the processing of personal data for the purpose of generating Page Insights, and the key provisions of the agreement entered into between us and Meta, can be found in the information on Page Insights.
If you have any further questions regarding the processing of your personal data, please contact Meta’s Data Protection Officer using the form provided, or our Data Protection Officer using the contact details given above.
Further information can be found in Facebook’s Data Policy.
This website uses Facebook’s visitor action pixels to measure conversions. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.
This allows the behaviour of website visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook advert. This enables the
effectiveness of Facebook adverts to be analysed for statistical and market research purposes, and future advertising campaigns to be optimised.
The data collected is anonymous to us as the operators of this website; we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Facebook, meaning that a link to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with Facebook’s Data Use Policy. This enables Facebook to display adverts on Facebook pages as well as outside of Facebook. We, as the website operator, have no influence over this use of the data.
The use of Facebook Pixel is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in effective advertising measures, including those on social media. Where consent has been sought, processing takes place exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.
Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Further details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://dede.
https://www.facebook.com/help/566994660333381.
Insofar as personal data is collected on our website using the tool described here and forwarded to Facebook, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Article 26 of the GDPR). This joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook following the transfer is not part of this joint responsibility. The obligations incumbent upon us jointly have been set out in a joint processing agreement. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. Under this agreement, we are responsible for providing data protection information when using the Facebook tool and for ensuring the tool is implemented on our website in a manner that complies with data protection law. Facebook is responsible for the data security of Facebook products. You may exercise your data subject rights (e.g. requests for information) regarding the data processed by Facebook directly with Facebook. If you exercise your data subject rights with us, we are obliged to forward these to Facebook.
You can find further information on the protection of your privacy in Facebook’s privacy policy: https://de-de.facebook.com/about/privacy/.
You can also disable the ‘Custom Audiences’ remarketing feature in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook.
If you do not have a Facebook account, you can opt out of Facebook’s behaviour-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.
Meta (Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter ‘Meta’), as the operator of Instagram, is solely responsible for the processing of personal data when you visit our Instagram page (hereinafter ‘fan page’). Please note that you use our fan page and its features at your own risk. This applies in particular to the use of interactive features (e.g. commenting, liking, sharing). When you visit our Instagram account, your data is processed as follows:
Personal data:
- We do not process any personal data simply as a result of you visiting our fan page. In particular, we do not operate the servers on which the fan page’s content and associated communications are stored and processed.
- If you contact us via our fan page, we will process your message and will be able to view your username and your current profile picture.
- When you access our fan page, your IP address is transmitted to Meta. According to Meta, this IP address is anonymised. Meta also stores information about users’ devices (e.g. as part of the ‘login notification’ feature). The data may also be transferred by Meta to countries outside the European Union. In particular, it is possible that some of the personal data collected may also be processed outside the European Union by Meta Platforms, Inc., which is based in the USA. We ourselves do not pass on any personal data.
- Meta sets out in detail which data it processes, for what purposes and on what legal basis, as well as the contact and configuration options available, in the legal basis for data processing at https://www.facebook.com/about/privacy/legal_bases and in Instagram’s Privacy Policy. This applies to all Meta products.
- We are not aware of how Meta uses the personal data generated from visits to fan pages for its own purposes, nor to what extent, if at all, Meta may link specific data to specific users.
Purposes and legal basis of the processing:
- We run this fan page to present content to you, to enable you to communicate with us, and to provide links to other interesting online content. The legal basis for the processing is Article 6(1)(f) of the GDPR.
Retention period:
- We will delete any messages sent in connection with our fan page as soon as the purpose for which they were stored has been fulfilled, you request that we delete them, or the purpose for storing them no longer applies. Messages subject to retention periods under commercial or tax law will be retained for 6 years.
Processing Page Insights
- Meta provides us with page summaries (known as Page Insights) for our fan page in anonymised form. Page Insights provide an overview of all key metrics within a specific time period. This enables us, for example, to learn more about our target audience and find out which content is most popular.
- Using Insights, we can only carry out anonymous analyses based on aggregated data regarding the use of our fan page. We do not collect any further data from visits to our fan page. This processing of personal data is carried out by Meta and us as joint controllers.
- If you are logged in to Instagram, there is a cookie on your device containing your Instagram ID. This enables Meta to track that you have visited our fan page and how you have used it.
- If you wish to avoid this, you should log out of Instagram or disable the ‘stay logged in’ function and delete the cookies stored on your device. This will delete any Instagram information that could be used to identify you directly. This allows you to use our fan page without your Instagram account being disclosed. If you access interactive features on the fan page (such as liking, commenting, sharing or sending messages), an Instagram login screen will appear. Once you have logged in, Instagram will once again be able to recognise you as a specific user.
Purposes and legal basis of the processing:
- Data processing is carried out in accordance with Article 6(1)(f) of the GDPR. We have a legitimate interest in analysing visits to our fan page and using these insights to improve it.
- We have entered into a joint controller agreement with Meta, which sets out the allocation of data protection obligations between us and Meta. Essentially, the agreements with Meta regarding joint responsibility mean that requests for information and the exercise of other data subjects’ rights, in particular the right to object, should, where appropriate, be made directly to Meta. This is because, as the provider of the social network, Meta alone has direct access to the necessary information and can also take any necessary measures and provide information directly. Should our assistance nevertheless be required, we can be contacted at any time.
- Your right to assert such claims directly against us remains unaffected.
- Further details on the processing of personal data for the purpose of generating Page Insights, and the key provisions of the agreement entered into between us and Meta, can be found in the information on Page Insights.
If you have any further questions regarding the processing of your personal data, please contact Meta’s Data Protection Officer using the form provided, or our Data Protection Officer using the contact details given above.
Further information can be found in Instagram’s Privacy Policy.
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is solely responsible for the processing of personal data when you visit our LinkedIn page. When you visit our LinkedIn page, your personal data is processed by LinkedIn as follows:
Personal data:
- We do not process any personal data when you visit our LinkedIn page. In particular, we do not operate the servers on which the profile content and associated communications are stored and processed.
- If you contact us via LinkedIn, we will receive your message, including your profile.
Processing Page Insights
When you visit our LinkedIn page, follow the page or interact with it, LinkedIn provides us with statistics and insights for our page in anonymised form, which help us to gain an understanding of the types of actions people take on our page (known as ‘Page Insights’). We do not receive any personal data through Page Insights, nor can we link the information received to individual accounts. This processing of personal data is carried out by LinkedIn and us as joint controllers.
Purpose of the processing:
- The processing serves our legitimate interest in analysing visits to our website and improving it on the basis of these findings.
Legal basis:
- Article 6(1)(f) of the GDPR.
We have entered into a joint controller agreement with LinkedIn, which sets out the allocation of data protection obligations between us and LinkedIn. Details regarding the processing of personal data for the purpose of generating Page Insights and the key provisions of the agreement concluded between us and LinkedIn can be found here: https://legal.linkedin.com/pages-joint-controller-addendum
Further information on how LinkedIn processes your personal data can be found here: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy
Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland, is solely responsible for the processing of personal data when you visit our Pinterest page. When you visit our Pinterest page, your personal data is processed by Pinterest as follows:
Personal data:
- We do not process any personal data when you visit our Pinterest page. In particular, we do not operate the servers on which the profile content and associated communications are stored and processed.
- If you contact us via our Pinterest page, we will receive your message, including your username.
Purpose of the processing:
- Presentation of content published via the Pinterest profile
- Communication with Pinterest users, e.g. by following their profile, saving pins or commenting on content
- Links to other online content that may be of interest to users of the site
Legal basis:
- Article 6(1)(f) of the GDPR.
As regards the relationship between us and Pinterest, Pinterest’s Terms and Conditions (including any further terms, policies and pages linked therein) set out which of the parties fulfils which obligations under the GDPR.
Retention period:
- We delete messages sent in connection with our profile as soon as the purpose for which they were stored has been fulfilled, you request that we delete them, or the purpose for storing them no longer applies. Messages subject to retention periods under commercial or tax law are retained for 6 years.
Further information on how Pinterest processes your personal data can be found here: https://policy.pinterest.com/de/privacy-policy
TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (TikTok), is solely responsible for the processing of personal data when you visit our TikTok channel. When you visit our TikTok channel, your personal data is processed by TikTok as follows:
Personal data:
- We do not process any personal data when you visit our TikTok channel. In particular, we do not operate the servers on which the channel’s content and associated communications are stored and processed.
- If you communicate with us via our TikTok channel, we will receive your message as well as your TikTok user data (in particular your display name, username, profile picture), the content of any comments you post, and the associated metadata (in particular, the date on which you posted the relevant comment).
Purpose of the processing:
- Presentation of the content published via the TikTok channel
- Communicating with users, e.g. by following them, commenting on posts, sharing them or reacting to them
- Links to other online content that may be of interest to users of the site
Legal basis:
- Article 6(1)(f) of the GDPR.
Retention period:
- We delete messages sent in connection with our profile as soon as the purpose for which they were stored has been fulfilled, you request that we delete them, or the purpose for storing them no longer applies. Messages subject to retention periods under commercial or tax law are retained for 6 years.
- TikTok retains data for as long as is necessary to provide the platform and for the other purposes set out in TikTok’s Privacy Policy. TikTok also retains data where this is necessary to fulfil contractual and legal obligations, where TikTok has a legitimate business interest in doing so, and to assert or defend legal claims. Further information on data retention can be found at: https://www.tiktok.com/legal/page/eea/privacy-policy/de
Further information on TikTok’s processing of your personal data can be found here: https://support.tiktok.com/de/account-and-privacy
This website embeds YouTube videos. The website is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in enhanced privacy mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch the video. However, the enhanced privacy mode does not necessarily prevent data from being shared with YouTube partners. YouTube therefore establishes a connection to the Google DoubleClick network, regardless of whether you watch a video.
As soon as you play a YouTube video on this website, a connection is established with YouTube’s servers. In doing so, the YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
Furthermore, once a video has started playing, YouTube may store various cookies on your device or use similar recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, amongst other things, to collect video statistics, improve user-friendliness and prevent fraud.
Where applicable, further data processing operations may be triggered after a YouTube video has been started, over which we have no control.
The use of YouTube is in the interest of presenting our online services in an appealing manner. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. Where consent has been sought, processing takes place exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.
Further information on data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de.
YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, is responsible for our YouTube channel. YouTube LLC is part of the Google Group and is represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you visit our YouTube channel, your personal data is processed by YouTube or Google as follows:
Personal data:
- We do not process any personal data when you visit our YouTube channel. In particular, we do not operate the servers on which the channel’s content and associated communications are stored and processed.
- If you contact us via our YouTube channel, we will receive your message, including your username.
Purpose of the processing:
- Presentation of the content published via the YouTube channel
- Communication with users, e.g. by following the channel, commenting on or sharing content
- Links to other online content that may be of interest to users of the site
Legal basis:
- Article 6(1)(f) of the GDPR.
As regards the relationship between us and YouTube, the YouTube Terms of Service (including any further terms, policies and pages linked therein) set out which of the parties fulfils which obligations under the GDPR.
Retention period:
- We delete messages sent in connection with our profile as soon as the purpose for which they were stored has been fulfilled, you request that we delete them, or the purpose for storing them no longer applies. Messages subject to retention periods under commercial or tax law are retained for 6 years.
Further information on the processing of your personal data by YouTube or Google can be found here: https://policies.google.com/privacy?hl=de≷=de
For the short message service offered here, we use the technical platform and services provided by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (X). Please note that you use the short message service offered here and its features at your own risk. This applies in particular to the use of interactive features (e.g. sharing, rating).
Personal data:
- As a provider, we do not collect or process any data.
- The data collected about you when you use the service is processed by X and may be transferred to countries outside the EU. This includes, amongst other things, your IP address, the application used, details of the device you are using (including device ID and application ID), information about the websites you have visited, and your location.
- This data is linked to the data in your X account. We have no control over the nature and scope of the data processed by X, the manner in which it is processed and used, or the disclosure of this data to third parties.
- You can restrict the processing of your data via the general settings of your X account and under the ‘Privacy and Security’ section. Furthermore, on mobile devices (smartphones, tablets), you can use the settings on those devices to restrict X’s access to your contacts, calendar data, photos, location data, etc. However, this depends on the operating system you are using. Further information on this can be found in the X Help Centre: https://help.x.com/de/safety-and-security/x-privacy-settings
Further information on the processing of personal data by X can be found here: https://x.com/de/privacy
5. Information requirements under Article 13 of the GDPR for our customers
- Information requirements under Article 13 of the GDPR for tenants and prospective tenants (View PDF)
- Information requirements under Article 13 of the GDPR for members (View PDF)
- Information requirements under Article 13 of the GDPR: Transponder log data (View PDF)
- Information requirements under Article 13 of the GDPR: CCTV surveillance at Bahnhofstraße 38–44 (View PDF)
- Information requirements under Article 13 of the GDPR: CCTV at Hohepfortestraße 43 (View PDF)
- Information requirements under Article 14 of the GDPR – CRIF-Bürgel (View PDF)
