Privacy
We are delighted that you have visited our website www.garcia-immobilien.de and are interested in our company.
The protection of your personal data, such as your date of birth, name, telephone number, address, etc., is very important to us.
The purpose of this privacy policy is to inform you about the processing of your personal data that we collect when you visit our website. Our data protection practices comply with the legal provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following privacy policy serves to fulfill the information obligations arising from the GDPR. These can be found, for example, in Art. 13 and Art. 14 ff. GDPR.
Controller
The controller within the meaning of Art. 4 No. 7 GDPR is the person who alone or jointly with others decides on the purposes and means of the processing of personal data.
With regard to our website, the controller is:
Garcia & Co. Immobilien GmbH
Ennester Straße 9
57439 Attendorn
Germany
Email: info@garcia-immobilien.de
Tel.
Fax: 0 27 22 / 93 72 22
Contact details of the data protection officer
We have appointed a data protection officer in accordance with Art. 37 GDPR. You can contact our data protection officer using the following contact details:
ituso GmbH
Fraunhoferstraße 9
85221 Dachau
Germany
Email: datenschutz@garcia-immobilien.de
Tel.: +49 8142 42050-20
Provision of the website and creation of log files
Every time you visit our website, our system automatically collects data and information from the device you are using (e.g., computer, mobile phone, tablet, etc.).
What personal data is collected and to what extent is it processed?
(1) Information about the browser type and version used;
(2) The operating system of the accessing device;
(3) Host name of the accessing computer;
(4) The IP address of the accessing device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Notification of whether the retrieval was successful;
(9) Amount of data transferred
This data is stored in our system's log files. This data is not stored together with the personal data of a specific user, so that individual page visitors cannot be identified.
Legal basis for the processing of personal data
Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in ensuring that the purpose described below is achieved.
Purpose of data processing
The temporary (automated) storage of data is necessary for the functioning of a website visit in order to enable the website to be delivered. The storage and processing of personal data is also carried out to maintain the compatibility of our website for as many visitors as possible and to combat misuse and eliminate malfunctions. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to react as quickly as possible to display errors, attacks on our IT systems, and/or errors in the functionality of our website. In addition, the data is used to optimize the website and to generally ensure the security of our information technology systems.
Duration of storage
The aforementioned technical data will be deleted as soon as it is no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.
Right to object and right to erasure
You can object to the processing at any time in accordance with Art. 21 GDPR and request the deletion of data in accordance with Art. 17 GDPR. You can find out what rights you have and how to exercise them in the lower section of this privacy policy.
Special features of the website
Our website offers you various functions that require us to collect, process, and store personal data. Below, we explain what happens to this data:
Booking request form
What personal data is collected and to what extent is it processed?
We will process the data you enter in our booking request form (date, number of persons, etc.) for the following purpose.
Legal basis for the processing of personal data
Art. 6 para. 1 lit. b GDPR (performance of (pre)contractual measures)
Purpose of data processing
The pre-contractual exchange of information is necessary to check your booking so that we can prepare for a possible subsequent conclusion of a contract.
Duration of storage
The data will be deleted as soon as it is no longer required for processing the booking and there are no longer any legal storage obligations.
Right to object and right to erasure
You can find information about your rights and how to exercise them at the bottom of this privacy policy.
Necessity of providing personal data
The information provided in the booking request form is neither contractually nor legally required, but is necessary in order to process your booking correctly. If you do not fill in the mandatory fields or do not fill them in completely, we will not be able to process your booking request.
Callback service
What personal data is collected and to what extent is it processed?
We will process the data you enter in our callback form, such as your telephone number and name, for the following purpose.
Legal basis for the processing of personal data
Art. 6 para. 1 lit. a GDPR (consent through clear affirmative action or behavior)
Purpose of data processing
The purpose of data processing is to provide and perform the callback service or to fulfill the callback request.
Duration of storage
The data will be deleted as soon as it is no longer required for processing your callback request.
Right to withdraw consent and erasure
You can revoke your consent to being contacted at any time in accordance with Art. 7 (3) GDPR. However, this does not affect the processing carried out up to the time of revocation. With regard to further rights, we refer you to the overview at the end of this privacy policy.
Necessity of providing personal data
All data you enter in our callback form, in particular the entry you have made and other information such as your name/pseudonym or your email address, will be processed by us for the purpose stated below.
Contact form(s)
What personal data is collected and to what extent is it processed?
We will process the data you enter in our contact forms, which you have entered in the input mask of the contact form, for the purpose specified below.
Legal basis for the processing of personal data
Art. 6 para. 1 lit. a GDPR (consent through clear affirmative action or behavior)
Purpose of data processing
We will only use the data collected via our contact form or contact forms to process the specific contact request received via the contact form.
Duration of storage
After processing your request, the data collected will be deleted immediately, unless there are legal retention periods.
Right of withdrawal and deletion
The options for revocation and deletion are based on the general provisions on the right of revocation and the right to deletion under data protection law set out below in this privacy policy.
Necessity of providing personal data
The use of the contact forms is voluntary and is neither contractually nor legally required. You are not obliged to contact us via the contact form, but can also use the other contact options provided on our website. If you wish to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the required information on the contact form, you will either not be able to send your request or we will unfortunately not be able to process your request.
Login area
What personal data is collected and to what extent is it processed?
We will process the registration and login data you enter for the purpose specified below.
Legal basis for the processing of personal data
Art. 6 para. 1 lit. b GDPR (implementation of (pre)contractual measures)
Purpose of data processing
You have the option of using a separate login area on our website. In order for us to verify your authorization to use the protected area or the protected documents, you must enter your login data (email or username and password) in the corresponding form.
Duration of storage
The data collected will be stored for as long as you maintain a user account with us.
Right to object and right to erasure
You can find information about your rights and how to exercise them at the bottom of this privacy policy.
Necessity of providing personal data
The use of the login area on our website is contractually required in order to use the protected area. The use of the content protected by the login area is not possible without entering personal data. If you wish to use our login area, you must fill in the fields marked as mandatory (user name and password). The entry of data requires the existence of a user account. Registration is not possible if the data you enter is incorrect. If the data you enter is incorrect or not entered, the protected area cannot be used. However, the rest of the site can still be used without logging in.
Newsletter registration form
What personal data is collected and to what extent is it processed?
When you register for the newsletter on our website, we receive the email address you entered in the registration field and, if applicable, additional contact details, provided that you have given them to us via the newsletter registration form.
Legal basis for the processing of personal data
Art. 6 para. 1 lit. a GDPR (consent through clear affirmative action or behavior)
Purpose of data processing
The data collected in the registration form for our newsletter will be used by us exclusively for sending our newsletter, in which we inform you about all our services and news. After registration, we will send you a confirmation email containing a link that you must click to complete your registration for our newsletter (double opt-in).
Duration of storage
You can unsubscribe from our newsletter at any time by clicking on the unsubscribe link included in every newsletter. Your data will be deleted immediately after you unsubscribe. Your data will also be deleted immediately if your registration is not completed. We reserve the right to delete your data without giving reasons and without prior or subsequent notification.
Right of withdrawal and deletion
You can withdraw your consent at any time in accordance with Art. 7 (3) GDPR. However, this does not affect the processing carried out up to the time of withdrawal. With regard to further rights, we refer to the overview at the end of this privacy policy.
Necessity of providing personal data
If you wish to subscribe to our newsletter, you must fill in the fields marked as mandatory and confirm your email address by clicking on the double opt-in link. The information provided when registering for the newsletter is neither necessary to enter into a contract with us nor required by law. It is used exclusively for sending our newsletter. If you do not provide the necessary information, we will unfortunately be unable to provide you with our newsletter service.
Automated credit check/scoring
If you wish to enter into a contract with us, we reserve the right to carry out an exclusively automated processing of your personal data in order to check your creditworthiness. We are also entitled to make such an automated decision in accordance with Art. 22 (2) a GDPR. Whether or not the contract can be concluded depends on the result of the automated credit check. A credit check calculates the statistical probability of a payment default. The credit assessment may contain probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical methods. These methods use a variety of characteristics, such as income, address data, occupation, marital status, and previous payment behavior, to determine the customer's future risk of default. The result is expressed in the form of a payment value (known as a score). The information obtained in this way forms the basis of our decision on the establishment, execution, or termination of a contractual relationship. If you believe that you have been wrongfully excluded from concluding a contract on the basis of the credit check, you are welcome to explain your position to us by email. We will then review the automated decision in accordance with Art. 22 (3) GDPR in the specific individual case. In order to carry out the credit check, we are permitted to store and process your personal data in accordance with Art. 6 (1) lit. b GDPR.
Based on the contract that is being prepared, we will transfer your data to the following provider(s) in the cases listed below:
Boniversum GmbH:
Boniversum GmbH, Markt 39-41, 57072 Siegen, Germany (http://www.creditreform.de/siegen): Our company regularly checks the creditworthiness of existing customers when concluding contracts and in certain cases where there is a legitimate interest. To this end, we work with Boniversum GmbH, Markt 39-41, 57072 Siegen, Germany, from whom we obtain the necessary data. For this purpose, we transfer your name and contact details to Boniversum GmbH.
Statistical analysis of visits to this website - web tracker
When you visit this website or individual files on the website, we collect, process, and store the following data: IP address, website from which the file was accessed, name of the file, date and time of access, amount of data transferred, and notification of the success of the access (so-called web log). We use this access data exclusively in non-personalized form for the continuous improvement of our website and for statistical purposes. We also use the following web trackers to evaluate visits to this website:
Google
We use the Google service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/ on our website . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d - 4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
The legal basis for the processing of personal data is your consent pursuant to Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR, which you have given on our website.
We use Google to be able to load additional Google services on the website. The service is used to provide additional Google services, such as the necessary data processing for the provision of streams and fonts and relevant content from Google Search. It is technically necessary to exchange the information about the website visitor that is already available to Google between Google services and to provide the website visitor with content tailored to their Google account.
For processing, the service or we collect the following data: Background data stored in the Google user account or other Google services about the website visitor, background data for the provision of Google services such as streaming data or advertising data, data about the website user's interaction with Google Search, Information about the device used, the user's IP address and browser, and other data from Google services for the provision of Google services related to our website.
If the service is actively enabled on our website, our website establishes a connection to the servers of Google Ireland Limited and transfers the necessary data. In the context of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. when using the Google service on our website, Google may transfer and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Apis, Doubleclick, Google Cloud, and Google Ads and Google Fonts in accordance with Google's privacy policy. You can view the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You can revoke your consent at any time. Further information on revoking your consent can be found either in the consent itself or at the end of this privacy policy.
Further information on the handling of the transferred data can be found in the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
Google Ads
We use the Google Ads service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/, on our website . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d - 4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
The legal basis for the processing of personal data is your consent pursuant to Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR, which you have given on our website.
Google Ads is an advertising system that allows us to place advertisements on external websites on the Internet to inform our customers about our services. Google Ads displays advertisements tailored to our customer base on external websites according to parameters set by us, which lead to our website. If the visitor clicks on the Google Ads advertisement, they will be taken to our website. In order to measure the success of Google Ads advertisements and the remuneration, Google Ads measures the success of the advertising measure when our website is accessed. our website processes the data provided by Google Ads in order to analyze and improve our advertising measures and to calculate any remuneration that may be due. Your data may also be used for remarketing purposes with your consent.
For the processing itself, the service or we collect the following data: Data on the advertising interests of site visitors, Interactions of site visitors with advertising related to our website, Data about visits to our website by site visitors who have previously clicked on Google Ads advertising and arrived at our website, Data about the device used, the IP address and browser of the user, and other data from Google services for the provision and refinement of Google advertising related to our website.
If the service is actively enabled on our website, our website establishes a connection to the servers of Google Ireland Limited and transfers the necessary data. In the context of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using Google Ads on our website, Google may transfer and process information from other Google services in order to provide background services for the improvement and customization of Google advertising. For this purpose, data may also be processed by other Google services such as Google Apis, Google Cloud, Google Ads, Google Analytics, Google Tag Manager, Google Marketing Platform, and Google Fonts in accordance with Google's privacy policy under Google's own responsibility for data protection10; You can view the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list. Further information on the responsible handling of business data can be found at https://business.safety.google/privacy/.
You can withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent form itself or at the end of this privacy policy.
Further information on the handling of the transferred data can be found in the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
Gstatic
We use the Gstatic service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/, on our website . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d - 4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
The legal basis for the processing of personal data is your consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have given on our website.
Gstatic is a background service used by Google to retrieve static content in order to reduce bandwidth usage and preload required catalog files. In particular, the service loads background data for Google Fonts and Google Maps.
Within the scope of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States10; You can view the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You can revoke your consent at any time. Further information on revoking your consent can be found either in the consent itself or at the end of this privacy policy.
Further information on the handling of the transferred data can be found in the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
Matomo (local)
We use the Matomo (local) service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, email: privacy@matomo.org, website: https://matomo.org/ on our website . Personal data is only transferred to servers in the European Union.
The legal basis for the processing of personal data is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. Our legitimate interest lies in achieving the purpose described below.
Matomo is hosted on our own server infrastructure and configured by us in such a way that no data is transferred to Matomo, InnoCraft Ltd. or other third parties. The collection of statistical data serves to monitor the functionality and user-friendliness of our website and to optimize it by analyzing anonymous user flows. This enables us to identify which content is relevant to our site visitors and users and to expand our offering accordingly. We can also use the collected data to create anonymous user profiles and extract general statistical information. The data collected in this context will not be merged with other personal data without your express consent.
For processing purposes, the service or we collect the following data: Parts of your IP address in anonymized form, user activities (e.g., referrer links, the length of time spent on certain URLs, clickstream, shopping cart or order IDs), data about your browser settings, browser provider, browser version, screen resolution, and the operating system used.
Data collection by our local Matomo instance is also set up to be privacy-friendly. IP addresses collected are anonymized before collection and processing. We have also activated the "Do Not Track Preference" in Matomo. This ensures that a "Do Not Track" request from your browser is respected by Matomo when you visit our website and that the page user is not tracked, regardless of our further measures. You can prevent Matomo from collecting data at any time by activating the "Do Not Track" setting in your browser.
With regard to processing, you have the right to object as set out in Art. 21. Further information can be found at the end of this privacy policy.
Further information on the handling of the transferred data can be found in the provider's privacy policy at https://matomo.org/faq/general/faq_18254/.
YouTube
We use the YouTube service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/, on our website . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d - 4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
The legal basis for the processing of personal data is your consent pursuant to Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR, which you have given on our website.
Videos from the YouTube platform are integrated into our website via the YouTube service. This integration allows us to display videos directly on our website. In this way, visitors to our website can view information about our services without having to visit the YouTube platform.
For processing, the service or we collect the following data: Data for displaying the stream, data on videos clicked on, playlists created, ratings and comments, information on the device used, the IP address and browser of the user, and other data from Google services for providing the video in accordance with Google's privacy policy
If YouTube is active on our website and a video is played, our website establishes a connection to the servers of Google Ireland Limited and transfers the data required to display the stream or video. Within the scope of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer. When YouTube videos are displayed on our website, YouTube may transfer and process information from other Google services in order to provide background services for the video, such as streaming data. For this purpose, data may also be transferred to the Google services Google Fonts, Google Apis, Google Video, and Doubleclick. You can view the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You can revoke your consent at any time. Further information on revoking your consent can be found either in the consent itself or at the end of this privacy policy.
Further information on the handling of the transferred data can be found in the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
Integration of external web services and processing of data outside the EU
We use active content from external providers, known as web services, on our website. When you visit our website, these external providers may receive personal information about your visit to our website. This may involve the processing of data outside the EU. You can prevent this by installing an appropriate browser plugin or by deactivating the execution of scripts in your browser. This may result in functional restrictions on websites that you visit.
We use the following external web services:
Google Cloud APIs
We use the Google Cloud APIs service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/, on our website . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d - 4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
The legal basis for the processing of personal data is your consent pursuant to Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR, which you have given on our website.
We use Google APIs to be able to load additional Google services on the website. Google APIs are a collection of interfaces for communication between the various Google services used on your website. The service is used in particular to display Google Fonts and to provide the Google Maps map.
For the processing itself, the service or we collect the following data: IP address
If the service is actively enabled on our website, our website establishes a connection to the servers of Google Ireland Limited and transfers the necessary data. In the context of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. when using the Google service on our website, Google may transfer and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Cloud, Google Maps, Google Ads, and Google Fonts in accordance with Google's privacy policy, for which Google is responsible under data protection law. You can view the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You can revoke your consent at any time. Further information on revoking your consent can be found either in the consent itself or at the end of this privacy policy.
Further information on the handling of the transferred data can be found in the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
Google Fonts
We use the Google Fonts service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/, on our website . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d - 4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
The legal basis for the processing of personal data is your consent pursuant to Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR, which you have given on our website.
We use the Google Fonts service to integrate attractive fonts into our website in order to display our website in a visually improved version. The service may also be used on our website if other Google services are loaded on our website that require Google Fonts fonts for execution. This is the case, for example, if our website uses Google services that require Google Fonts for execution.
For processing, the service or we collect the following data: Data on fonts, IP address of the website visitor, statistics on the use of fonts, and other data from Google services related to our website.
If the service is active on our website, our website establishes a connection to the servers of Google Ireland Limited and transfers the required data. In the context of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. when using the Google service on our website, Google may transfer and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Apis, Google Cloud, and Google Ads in accordance with Google's privacy policy. You can view the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You can withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent itself or at the end of this privacy policy.
Further information on the handling of the transferred data can be found in the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
Legal text snippet and modules
We use the legal text snippet and modules service provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, email: support@website-check.de, website: https://www.website-check.de/, on our website. Personal data is only transferred to servers in the European Union.
The legal basis for processing is Art. 6 para. 1 lit. c GDPR. The use of this service helps us to comply with our legal obligations.
With the help of the service, content from our legal texts is reloaded onto our website. The latest legal texts are reloaded via the integration on our site. This integration may also allow additional technical modules relating to the legal texts or legally required elements to be reloaded.
You can find your rights regarding processing at the end of this privacy policy.
Further information on the handling of the transferred data can be found in the provider's privacy policy at https://www.website-check.de/datenschutzerklaerung/.
Superchat
We use the Superchat service provided by SuperX GmbH, Schönhauser Allee 180, 10119 Berlin, Germany, email: hello@superchat.de, website: https://www.superchat.de/ on our website . Personal data is only transferred to servers in the European Union.
The legal basis for the processing of personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have given on our website.
The service is used for organized communication between companies and customers across various platforms.
You can revoke your consent at any time. Further information on revoking your consent can be found either in the consent itself or at the end of this privacy policy.
Further information on the handling of the transferred data can be found in the provider's privacy policy at https://www.superchat.de/datenschutz.
The provider also offers an opt-out option at https://www.superchat.de/datenschutz.
Website Check Seal
We use the Website Check Seal service provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, email: support@website-check.de, website: https://www.website-check.de/ on our website . Personal data is transmitted exclusively to servers in the European Union.
The legal basis for the processing of personal data is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. Our legitimate interest lies in achieving the purpose described below.
The Website-Check GmbH script involves the technical integration of the Website-Check seal. With this seal, we want to show that we take data protection very seriously. Data is transferred to Website-Check GmbH for the purpose of delivering and displaying the seal on our website.
With regard to processing, you have the right to object as set out in Art. 21. Further information can be found at the end of this privacy policy.
Further information on the handling of the transferred data can be found in the provider's privacy policy at https://www.website-check.de/datenschutzerklaerung/.
Ynfinite
We use the Ynfinite service provided by Ypsolution GmbH, Overstolzenstr. 2a, 50677 Cologne, Germany, website: https://www.ynfinite.de/, on our website. Personal data is only transferred to servers in the European Union.
The legal basis for the processing of personal data is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. Our legitimate interest lies in achieving the purpose described below.
The service is part of the CMS "Ynfinite" used by Ypsolution. Without this partial functionality, our website cannot be delivered or displayed correctly.
Ynfinite only processes personal data that is absolutely necessary for the operation of the website, including the IP address. The IP address is required to establish a connection to Ynfinite's servers so that the pages of the website, images, and scripts can be loaded. After the connection is established, the IP address is only stored in log files for a short period of time for troubleshooting purposes and is then discarded.
With regard to processing, you have the right to object as set out in Art. 21. Further information can be found at the end of this privacy policy.
Further information on the handling of the transmitted data can be found in the provider's privacy policy at https://www.ynfinite.de/datenschutz.html.
Data security and data protection, communication by email
Your personal data is protected by technical and organizational measures during collection, storage, and processing in such a way that it is not accessible to third parties. In the case of unencrypted communication by email, we cannot guarantee complete data security during transmission to our IT systems, so we recommend encrypted communication or postal delivery for information with a high level of confidentiality.
Automatic email archiving
Scope of processing of personal data
We expressly point out that our email system has an automated archiving procedure. All incoming and outgoing emails are digitally archived in an audit-proof manner.
Legal basis for the processing of personal data
Art. 6 para. 1 lit. c GDPR (legal obligation). The legal obligation consists in compliance with tax and commercial law requirements (e.g., §§ 146, 147 AO, §§ 238, 257 HGB).
Purpose of data processing
The purpose of archiving is to comply with tax law (e.g., §§ 146, 147 AO – obligation to retain emails of tax relevance) and commercial law requirements (e.g., §§ 238, 257 HGB – obligation to archive business correspondence).
Duration of storage
Our email communication is stored until the expiry of tax and commercial law retention obligations. The storage period can be up to 10 years.
Right to object and right to erasure
You can object to the processing at any time in accordance with Art. 21 GDPR and request the deletion of data in accordance with Art. 17 GDPR. You can find out what rights you have and how to exercise them in the lower section of this privacy policy.
Handling of application documents
If you have any questions regarding our email archiving system, please contact our data protection officer. We would also like to point out that we only accept application documents in PDF file format. Zipped files (WinZip, WinRAR, 7Zip, etc.) are filtered out by our security systems and will not be delivered. We do not consider applications in Word file format or other file formats and delete them unread. Please note that application documents sent by unencrypted email may be opened by third parties before they reach our IT systems. We assume that we may also respond to unencrypted application emails in unencrypted form. If you do not wish this to happen, please indicate this in your application email.
Right to information and requests for correction – deletion & restriction of data – revocation of consent – right to object
Right to information
You have the right to request confirmation as to whether we are processing personal data relating to you. If this is the case, you have the right to obtain the information specified in Art. 15 (1) GDPR, provided that the rights and freedoms of other persons are not affected (cf. Art. 15 (4) GDPR). We will also be happy to provide you with a copy of the data.
Right to rectification
Pursuant to Art. 16 GDPR, you have the right to have any personal data that we have stored incorrectly (such as your address, name, etc.) corrected at any time. You can also request that the data we have stored be completed at any time. Any necessary adjustments will be made immediately.
Right to erasure
According to Art. 17 para. 1 GDPR, you have the right to have the personal data collected about you deleted if
- the data is no longer required;
- the legal basis for processing has ceased to apply without replacement due to the withdrawal of your consent;
- You have objected to the processing and there are no legitimate reasons for the processing;
- Your data is being processed unlawfully;
- a legal obligation requires this or collection has taken place in accordance with Art. 8 (1) GDPR.
The right does not exist in accordance with Art. 17 (3) GDPR if
- the processing is necessary for exercising the right of freedom of expression and information;
- Your data has been collected on the basis of a legal obligation;
- the processing is necessary for reasons of public interest;
- the data is necessary for the establishment, exercising, or defense of legal claims.
Right to restriction of processing
Pursuant to Art. 18 (1) GDPR, you have the right to request the restriction of the processing of your personal data in certain cases.
This is the case if
- the accuracy of the personal data is contested by you;
- the processing is unlawful and you do not consent to its erasure;
- the data is no longer required for the purpose of processing, but the collected data is required for the assertion, exercise, or defense of legal claims;
- an objection to the processing has been lodged pursuant to Art. 21 (1) GDPR and it is still unclear which interests prevail.
Right to revoke
If you have given us your express consent to process your personal data (Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR), you can revoke this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of your consent until revocation.
Right to object
Pursuant to Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of Art. 6 para. 1 lit. f (within the scope of a legitimate interest). You are only entitled to this right if there are special circumstances that speak against storage and processing.
How can you exercise your rights?
You can exercise your rights at any time by contacting us using the contact details below:
Garcia & Co. Immobilien GmbH
Ennester Straße 9
57439 Attendorn
Germany
Email: info@garcia-immobilien.de
Tel.
Fax: 0 27 22 / 93 72 22
Right to data portability
In accordance with Art. 20 GDPR, you have the right to request the transfer of your personal data. We will provide the data in a structured, commonly used, and machine-readable format. The data can be sent either to you or to a responsible party designated by you.
Upon request, we will provide you with the following data in accordance with Art. 20 (1) GDPR:
- Data collected on the basis of your express consent in accordance with Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR;
- Data that we have received from you in accordance with Art. 6 (1) lit. b GDPR within the framework of existing contracts;
- Data that has been processed as part of an automated procedure.
We will transfer the personal data directly to a controller of your choice, provided this is technically feasible. Please note that we are not permitted to transfer data that interferes with the freedoms and rights of other persons in accordance with Art. 20 (4) GDPR.
Right to lodge a complaint with the supervisory authority pursuant to Art. 77 para. 1 GDPR
If you suspect that your data is being processed unlawfully on our website, you can of course seek legal clarification of the issue at any time. You also have any other legal options available to you. Irrespective of this, you have the option of contacting a supervisory authority in accordance with Art. 77 (1) GDPR. The right to lodge a complaint pursuant to Art. 77 GDPR is available to you in the EU member state of your residence, your place of work, and/or the place of the alleged infringement, i.e., you can choose the supervisory authority to which you wish to lodge a complaint from the above-mentioned locations. The supervisory authority to which the complaint was lodged will then inform you of the status and results of your submission, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.
Created by:
© DURY LEGAL Attorneys at Law – www.dury.de
© Website-Check GmbH – www.website-check.de
Privacy policy for social media platforms
Terms of use and processing information
In the final version, any text modules that are not required should be deleted.
similar to the information requirements, the text can be stored on a subpage of the official website. A link to this subpage will then be provided on the respective platform.
Privacy policy for social media platforms
Below you will find the privacy policy for our social media accounts. These allow us to get in direct contact with our customers and interested parties, actively communicate, and share news.
some of the platforms we use also allow you to respond directly to our posts and comment on them. Comments, likes, and posts are publicly visible, which means that it is also publicly visible who posted them.
The following privacy policy applies to the following social media sites:
-
Facebook/Instagram fan page
-
LinkedIn
-
Xing
General information about social media platforms
When you visit social networks, your user behavior is comprehensively analyzed by the platform operators. Among other things, the operator can assign your activities to you through the device you are using, regardless of whether you are logged into an account or not. This is done, for example, through the use of cookies stored on your device or by recording your IP address. In addition, the operator may create user profiles with the respective preferences and interests. For more information on these processes, please refer to the privacy policy of the respective platform
I. Name and address of the controller
With regard to our social media presence, the controller is:
Garcia & Co. Immobilien GmbH
Ennester Straße 9
57439 Attendorn
Germany
Email: info@garcia-immobilien.de
Tel.
II. Name and address of the data protection officer
We have appointed a data protection officer in accordance with Art. 37 GDPR. You can contact our data protection officer using the following contact details:
ituso GmbH
Fraunhoferstraße 9
85221 Dachau
Germany
Email: datenschutz@garcia-immobilien.de
Tel.
Website: http://www.ituso.de/
III. General
Legal basis, purpose
The legal basis for data processing is the legitimate interest pursuant to Article 6(1)(f) GDPR to ensure a comprehensive online presence and an optimized presentation of the company. The measurement of visitor behavior on some platforms serves to optimize the presentation and alignment of our online offering and to communicate effectively with you.
The analysis processes on some platforms may be based on different legal bases, which are to be specified by the operators of the social networks in their privacy information (e.g., consent pursuant to Art. 6 para. 1 lit. a) GDPR).
Rights of data subjects
In accordance with Articles 15 et seq. of the GDPR, you have the right to obtain information about your personal data, to have it corrected or deleted, to restrict its processing, to object to its processing, and to data portability. You also have the right to lodge a complaint with a data protection supervisory authority. If the processing is based on Article 6(1)(a) GDPR or Article 9(2)(a) GDPR (consent), you have the right to withdraw your consent at any time with future effect, without affecting the lawfulness of the processing based on consent before its withdrawal.
In the event of joint responsibility, we only have limited influence on the processing operations on the platforms. In this case, the rights of the data subject can also be asserted against the operator of the respective platform.
IV. Social media platforms we use
a) Facebook/Instagram fan page
The provider of Facebook is Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, D04 X2K5, Ireland; hereinafter referred to as Meta).
Responsibilities
There is joint responsibility with Meta in accordance with Art. 26 GDPR. Meta is the primary controller within the meaning of the GDPR (Article 26) with regard to Insights data: https://www.facebook.com/legal/terms/page_controller_addendum. (From April 25, 2023: In addition, please note the Controller Addendum to the Facebook Business Tools Terms: https://www.facebook.com/legal/controller_addendum)
General
Current information about our company is posted on our Instagram or Facebook fan page and can be commented on and/or liked by users. Users can also post so-called visitor contributions on our page. The comments, likes, and posts are publicly visible, and therefore it is also publicly recognizable who posted them. Users can also send us messages, but these are not publicly visible.
Facebook / Instagram Insights
insights allow us to access certain statistical, anonymized data on user behavior (https://www.facebook.com/help/instagram/788388387972460). This includes, for example, the total number of page views, "likes," page activity, post interactions, reach, video views, and post reach. Data on groups linked to our Facebook or Instagram page is also provided in this way.
The Insights data is generated and provided by Meta using cookies. We can only change the period for which we want to view the analysis. We can also specify certain settings for the target group of our posts, which will be reflected in the statistics. We cannot disable the Insights function. Meta uses the data in particular for advertising purposes (creation of personalized advertising), creation of user profiles, and market research purposes. If the visitor to the fan page has an Instagram/Facebook user account and is logged in with it while visiting the page, the information provided by the cookies is stored across devices. Meta passes on data, including to Meta Platforms Inc., the US parent company of Meta, without us having any influence on this. Meta is certified under the EU-US Data Privacy Framework and is therefore considered to be compliant with data protection regulations within the meaning of the GDPR. Details on data processing by Meta can be found here: https://www.facebook.com/policy.php 
We use the Insights data as well as the other visible data to optimize our offering on our Facebook/Instagram page and to interact with users. For example, we use information about visit times to optimize the timing of our posts. Information about the type of end devices used helps us to design our posts, etc. so that they are displayed optimally on all types of end devices. Based on the Facebook/Instagram terms of use, which every user has agreed to when setting up their profile, we can identify the subscribers and fans of the page and view their profiles and other information they have shared.
You can assert your rights as a data subject against both us and Meta. Further information on Meta's data protection policy in accordance with Article 13 of the GDPR is available here: https://www.facebook.com/about/privacy
b) LinkedIn
We have a company profile on the LinkedIn business platform. LinkedIn is provided by LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible for data protection matters outside the USA.
Responsibilities
LinkedIn is responsible for the processing of personal data on the technical platform, in particular for all interactive functions such as commenting, sharing, and reacting to posts.
We are solely responsible for the content of our company profile and the processing of data that we receive via our company profile.
General
linkedIn allows you to contact us directly. We also share posts, events, and other basic information about our company via this platform.
When you contact us, your data will generally be processed for the purpose of responding to your inquiry in accordance with Art. 6 (1) lit. f) GDPR (legitimate interest).
The privacy policy is available at https://www.linkedin.com/legal/privacy-policy. There you will also find information on how personal data is handled on the platform.
LinkedIn's cookie policy is available at https://www.linkedin.com/legal/cookie-policy. There you can also reject the advertising cookies used by LinkedIn.
LinkedIn has been certified under the EU-U.S. Data Privacy Framework of July 10, 2023.
c) Xing
We have a company profile on the Xing business platform. The provider is New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.
Responsibilities
Xing is responsible for the processing of personal data on the platform, in particular for all interactive functions such as commenting, sharing, and responding to posts.
We are solely responsible for the content of our company profile and the processing of data that we receive via our company profile.
General
xing allows you to contact us directly. In addition, we share posts, events, and other basic information about our company via this platform.
The processing of your data when you contact us is carried out for the purpose of responding to your inquiry in accordance with Art. 6 para. 1 lit. f) GDPR (legitimate interest).
Information on how they handle users' personal data can be found in Xing's privacy policy: https://privacy.xing.com/de/datenschutzerklaerung.