Privacy Policy

Privacy Policy ARE GG3 Development GmbH & Co. KG

This Privacy Policy serves to inform you about how ARE GG3 Development GmbH & Co. KG processes your personal data.

In the following, we have compiled the data protection information on data processing separately according to groups of data subjects. For certain types of data processing, which only affects specific groups, the information requirements are met separately:

Content:

I. General data protection information
II. Data protection information when visiting this website
III. Data protection information for prospective tenants
IV. Rights of the data subject

I. General data protection information
The data controller in accordance with Art. 4 para. 7 GDPR ARE GG3 Development GmbH & Co. KG is responsible for the data processing listed below

1.Contact details of the data controller:
ARE GG3 Development GmbH & Co. KG
Dr Kilian Kasperek and Volker Dittmeier
Wilhelmstrasse 2
80801 Munich

2. Contact person for data protection
You can reach our contact person for data protection at:
ARE GG3 Development GmbH & Co. KG
Wilhelmstrasse 2
80801 Munich
Tel: +49 89 2123109 – 0
Email:

II. Data protection information when visiting this websit
1. Purpose and scope of data processing

1.1. Server log

When you visit our website, every access is stored in a log file, known as a server log. Each record comprises information about:

  • The page from which a page of our website was requested
  • The page called up within our website
  • The date and time of the query
  • The amount of data transferred
  • The access status (whether access was successful or not)
  • The browser used, e.g. B. Mozilla Firefox, Google Chrome, Apple Safari etc.)

The legal basis for this collection is Art. 6 para. 1 lit. f) GDPR (legitimate interest). We cannot offer you an opportunity to object from this logging, as the server protocol is essential to ensure the availability of this website and in the event of attacks on the website. The data from the server log is automatically deleted after seven days.

1.2. Contact form

If you contact us using the contact form provided on the website, this is done on the basis of your consent (Art. 6 para. 1 lit. a) GDPR).
We only use the data transmitted via the contact form to answer and process your request. If the contact request is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR (implementation of pre-contractual measures (initiation of rental relationship) in accordance with Art. 6 para. 1 lit. b) GDPR).
No further use of this data by ARE GG3 Development GmbH & Co. KG or third parties takes place at any time. Your data will be stored until your request has been fully processed and then deleted by us.

III.  Data protection information for prospective tenants

Source of personal data
We process personal data that we receive from you in the course of contract initiation for the conclusion of a rental agreement.

Categories of personal data
We process the following categories of personal data:
All personal data that you transmit or have transmitted to us. This includes: your first and last name, your telephone number, your email address.

Purposes for which the personal data is to be processed and legal basis of the processing
We process your personal data in compliance with the applicable national and European legal data protection requirements. The processing is lawful if at least one of the following conditions is met:

a) Consent (Art. 6 para. 1 lit. a) GDPR)
If you have given us your consent to process your personal data for specific purposes, this processing is legal on the basis of your consent. Your consent may be withdrawn at any time with future effect. This also applies to the withdrawal of declarations of consent that were given to us before the GDPR came into effect, i.e. before 25 May 2018.

b) To fulfil contractual obligations or to carry out pre-contractual measures (Art. 6 para. 1 lit. b) GDPR)
We process personal data that you transmit to us as part of your inquiry (e.g. the information in the tenant self-disclosure form) in order to fulfil our pre-contractual obligations towards our customers or to carry out pre-contractual measures. This also includes the associated customer care.

c) Due to legal requirements (Art. 6 para. 1 lit. c) GDPR) or in the public interest (Art. 6 para. 1 lit. e) GDPR)
ARE GG3 Development GmbH & Co. KG is subject to various legal obligations (e.g. commercial and tax law storage regulations according to the Commercial Code and the Tax Code). The purposes of the processing include, among other things, the fulfilment of fiscal control and reporting obligations.

d) As part of the balancing of interests (Art. 6 para. 1 lit. f) GDPR)
We also process your data beyond the actual fulfilment of the contract in order to protect our legitimate interests or those of third parties.

Examples:

  • Assertion of legal claims and mounting a defence in legal disputes
  • Consulting and data exchange with credit agencies to determine creditworthiness and default risks. Advertising, market and opinion research, provided you have not objected to the use of your data
  • Consulting and data exchange with credit agencies to determine creditworthiness and default risks. Revision and improvement of procedures for general business management and further development of products and services
  • Prevention, investigation and prevention of criminal offences
  • Ensuring IT security and IT operations

Categories of recipients of personal data
Within the company, the offices that are required to fulfil our contractual and legal obligations have access rights.
ARE GG3 Development GmbH & Co. KG also has some of the aforementioned processes and services carried out by carefully selected service providers who are based within the EU and who are commissioned in compliance with data protection regulations. These include companies in the categories of IT services, payment transactions, and billing and collections, property and facility management that we use within the framework of order processing relationships. With regard to the transfer of data to other recipients, we may only pass on information about you if required to do so by law, if you have given your consent or if we are authorised to pass it on. If these conditions are met, recipients of personal data may include:

  • Public authorities and institutions (e.g., regulatory- and financial authorities) in the case of legal or regulatory obligation
  • Other companies or comparable institutions to which we transmit personal data in order to carry out the business relationship with you
  • Other parties may also be data recipients if you have given us your consent for the data transfer

The data controller’s intention to transfer the personal data to a third country or an international organisation:

An active transfer of personal data to a third country or an international organisation does not take place.

Criteria for determining the duration for which personal data is stored: The criteria for determining the duration of storage are determined by the end of the purpose and subsequent statutory retention period. If the data is no longer required for the fulfilment of contractual or statutory obligations, it will be regularly deleted, unless its further processing – limited and, if necessary, restricted – is necessary for the following purposes:

      • Fulfilment of commercial and tax-regulatory storage obligations: These include the German Commercial Code (HGB) and the German Tax Code (AO). Thereafter, the retention and documentation periods are set at up to 10 years
      • Preservation of evidence within the framework of statutory provisions on limitation: According to Sections 195 et seq. of the German Civil Code (BGB), the regular limitation period is 3 years, special circumstances up to 30 years

Obligation to provide data and possible consequences of not providing data
In the context of our business relationship, you must provide those items of personal data that are necessary for the establishment and implementation of a business relationship and the fulfilment of the associated contractual obligations or that we are legally obliged to collect. Without this data, we will generally not be able to provide the desired service or to conclude or execute a contract with you.

The existence of automated decision making, including profiling
In principle, we do not use fully automated decision making according to Art. 22 GDPR for the establishment and implementation of the business relationship. Should we use these procedures in individual cases, we will inform you separately, insofar as this is required by law.

IV.  Rights of the data subject

If personal data is processed, the data subjects have the following rights vis-à-vis the data controller within the meaning of the GDPR:

    1. Right to information
      Data subjects can request information from the data controller regarding whether and how their personal data is being processed, taking into account the requirements of Art. 15 GDPR.
    2. Right to rectification
      In compliance with the requirements of Art. 16 GDPR, data subjects have a right to have the data controller correct and/or complete the data if the processed personal data relating to them is incorrect or incomplete. We are required to make the correction immediately.
    3. Right to erasure (“right to be forgotten”)
      Data subjects can request the data controller delete their personal data in compliance with the requirements of Art. 17 GDPR and assert their right to be forgotten.
    4. Right to restriction of processing
      Data subjects can request the data controller restrict the processing, into account the requirements of Art. 18 GDPR.
    5. Right to information (obligation to notify)
      If the data subject has asserted the right to rectification, erasure or restriction of processing against the data controller, the data controller is obliged to inform all recipients to whom the personal data concerning them has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed as to these recipients by the data controller, according to Art. 19 GDPR.
    6. Right to data portability
      Subject to the requirements of Art. 20 GDPR, data subjects have the right to obtain the personal data that they have provided to the data subject in a structured, common and machine-readable format.
    7. Right to object
      Subject to the requirements of Art. 21 GDPR, data subjects have the right, for reasons arising from their particular situation, to object at any time to the processing of personal data relating to them that was processed on the basis of Art. 6 para. 1 lit. e) or f) GDPR.
    8. The right to file a legal complaint with a supervisory authority
      Without prejudice to any other administrative or judicial remedy, the data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State containing their residence, place of work, or the location of the supposed violation, if the data subject believes that the processing of their personal data violates the GDPR.
    9. The data protection supervisory authority responsible for ARE GG3 Development GmbH & Co. KG is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18,
91522 Ansbach
Tel: +49 (0) 981 180093-0
Email: