DATA PROTECTION DECLARATION
The purpose of data protection is to prevent the impairment of the rights of our customers, busi-ness partners, suppliers and other contractual partners when handling their personal data. For this reason, apollo real estate GmbH & Co. KG processes personal data exclusively with careful consideration of valid statutory provisions. These are the new version of the German Federal Data Protection Act (BDSG), the EU General Data Protection Regulation (GDPR), the German Teleservices Act (TMG) and all other laws that contain respective provisions.
In the data protection declaration below, we explain how we handle personal data in the course of its collection, processing, use and erasure in connection with services offered on the internet platform nai-apollogroup.de. The object of our data use and its forwarding to partners of the NAI apollo group always relates exclusively to the real estate business of the company. This includes real estate-related activities such as purchase, rental, brokering, renovation, extension, admin-istration, management, valuation and sale in office and retail, industry and logistics, and the resi-dential segment.1. Controller and data protection officerThis data protection information applies to data processing by
apollo real estate GmbH & Co. KG, Schillerstraße 20, 60313 Frankfurt am Main, Germany, email: firstname.lastname@example.org, tel.: + 49 (0)69 - 970 50 50, fax +49 (0)69 - 970 50 55.
The data protection officer responsible for data processing is:
Senpro Informationstechnologie GmbH
Hungener Straße 62
Tel.: +49 (0)6404 - 658 03 51
2. Collection and storage of personal data and the type and purpose of its use
a) When visiting the websiteWhen accessing the website www.nai-apollo.de , the browser installed on your device automati-cally transmits information to our website’s server. This information is stored temporarily in a what is known as a log file. The following information is recorded without any action on your part and is stored until it is automatically deleted:
The IP address of the querying computer, date and time of access, name and URL of the ac-cessed file, website used for access (referrer URL), browser used and, if necessary, the operat-ing system of your computer and the name of your access provider.
We process the specified personal data to ensure a trouble-free connection to the website, quick and easy use of our website, for analysis of the system security and stability and for other administrative purposes.
The legal basis for the data processing is Art. 6 para. 1 sentence 1 f) GDPR. The legitimate in-terest of apollo real estate GmbH & Co. KG arises from the purposes of data collection stated above. apollo real estate GmbH & Co. KG shall never use the collected personal data to draw any conclusions on your person.
b) When subscribing to our newsletter
Unsubscribing from the newsletter is possible at any time, for example via the link at the end of each newsletter. Alternatively, you can unsubscribe by sending us an email at email@example.com at any time.
c) When using the contact form / NAI Help Desk
apollo real estate GmbH & Co. KG offers you the opportunity to contact us with questions of any kind via the form provided on the website. This requires you to specify a valid email address so that apollo real estate GmbH & Co. KG knows who is sending the query and in order to reply to such a query. Additional information may be provided voluntarily.
We perform data processing for the purpose of making contact in accordance with Art. 6 para. 1 sentence 1 a) GDPR; this is based on the consent you provided voluntarily. The same applies to the forwarding of this data to our respective cooperation partners, on whom we have imposed a contractual obligation to likewise process their data exclusively giving careful consideration to the applicable statutory provisions on data protection.
The personal data collected and in some instances forwarded by apollo real estate GmbH & Co. KG in connection with the use of the contact form is deleted immediately at apollo real estate GmbH & Co. KG after your query has been answered.
3. Data disclosure
The transfer of personal data shall only take place for the purposes stated below. apollo real es-tate GmbH & Co. KG shall only forward your personal data to third parties if:
(1) You have given your explicit consent in accordance with Art. 6 para. 1 sentence 1 a) GDPR, and in particular your consent for us not merely to process the data ourselves, but also to forward the data to our respective cooperation partners for further processing,
(2) the forwarding beyond the scope necessary to fulfil the contract is required to safeguard our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 f) GDPR, and there is no reason to believe that you have an overriding legitimate interest that your personal data shall not be disclosed,
(3) the disclosure in accordance with Art. 6 para. 1 sentence 1 c) GDPR is necessary for compliance with a legal obligation and
(4) this is lawful and in accordance with Art. 6 para. 1 sentence 1 b) GDPR for the perfor-mance of a contract with you, or in order to take steps at your request prior to entering into a contract.
apollo real estate GmbH & Co. KG also uses temporary cookies to optimise user-friendliness; these cookies are stored for a specified period on your device. When you revisit our website to utilise our services, the cookie automatically recognises that you have already visited our website and which entries and settings you undertook. This eliminates the need to do this once again.
The personal data processed by cookies is required for the stated purposes of safeguarding our legitimate interests as well as those of third parties in accordance with Art. 6 para. 1 sentence 1 f) GDPR.
Most browsers accept cookies automatically. However, you can configure your browser to pre-vent cookies from being stored on your computer or so that you always receive a notification be-fore a new cookie is created. However, the complete deactivation of cookies may result in your not being able to use all of the features of our website.
5. Analysis tools
We use the tracking measures described in the following on the basis of Art. 6 para. 1 sentence 1 f) GDPR. The tracking measures we employ are used to ensure a needs-oriented design and ongoing optimisation of our website. We also use the tracking measures to record the use of our website for statistical purposes and evaluate its use for the purpose of optimising our offer for you. These interests are legitimate in the meaning of the above-mentioned regulation.
In the following, the respective data processing purposes and data categories are described for each of the corresponding tracking tools.
a) Google Analytics
For the purposes of a needs-oriented design and the ongoing optimisation of our website, we use Google Analytics, a web analysis service of Google Inc. ( https://www.google.de/intl/en/about/ ) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). As part of this, pseudonymised user profiles are created and cookies (see Section 4) are used. The information on your use of this website which is generated by a cookie, such as
operating system used,
referrer URL (the previously visited website),
host name of the accessing computer (IP address),
time of the server query,
is transferred to a Google server in the USA and stored there. The information is used to evalu-ate the use of the website, compile reports on website activities and provide additional services in connection with the use of the website and the internet for market research purposes and to en-sure the needs-oriented design of these internet pages. This information may also be forwarded to third parties, provided this is required by law or to the extent that third parties process this data on our behalf. Under no circumstances will your IP address be combined with other data by Google. The IP addresses are anonymised so that allocation to your person is not possible (IP masking).
You can prevent the installation of cookies by making a corresponding setting in your browser software; however, we would like to point out that in this event you may not be able to make full use of all functions on this website.
Furthermore, you can prevent Google from collecting data (including your IP address) generated by the cookie and regarding your use of the website as well as preventing their processing of this data by downloading and installing the browser add-on available at the following link ( https://tools.google.com/dlpage/gaoptout?hl=en-GB ).
Alternatively to the browser add-on, especially for browsers on mobile devices, you can also pre-vent the collection of personal data by Google Analytics by clicking this link. This sets an opt-out cookie that prevents the future collection of your personal data when you visit this website. The opt-out cookie is stored on your device and is only valid in this browser and only for our website. If you delete the cookies in this browser, you will need to set the opt-out cookie again.
Further information on data protection in connection with Google Analytics is available in Google Analytics Help ( https://support.google.com/analytics/answer/6004245?hl=en ).
b.) Google AdWords conversion tracking
We also use Google conversion tracking to record and evaluate the use of our website for statis-tical purposes and in order to optimise our offer for you. For this purpose, Google AdWords sets a cookie (see Section 4) on your computer, provided that you accessed our website via a Google advertisement.
These cookies expire after 30 days and do not identify you personally. If the user visits certain pages on the website of the AdWords customer and the cookie has not yet expired, Google and the customer can recognise that the user clicked on the ad and was redirected to this page.
Every AdWords customer receives a different cookie. As such, cookies cannot be tracked via the websites of AdWords customers. The information collected using conversion cookies is used to compile conversion statistics for AdWords customers who have decided to use conversion track-ing. The AdWords customers are informed of the total number of users who clicked their adver-tisement and who were redirected to a website featuring a conversion tracking tag. They do not, however, receive any information which can be used to identify the user personally.
If you do not wish to be part of the tracking process, you can also reject the setting of a cookie required for this – for example via a browser setting that generally prevents the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies coming from the “ www.googleadservices.com ” domain. Google’s data protection notice on conversion tracking is available here ( https://services.google.com/sitestats/en.html ).
We use the open-source software Matomo for the analysis and statistical evaluation of the use of the website. Cookies are used for this purpose (see Section 4). The information generated by the cookie on the use of the website is transferred to our servers and summarised in pseudonymised user profiles. The information is used to evaluate the use of the website and enable a needs-oriented design of our website. No information will be forwarded to third parties.
Under no circumstances will the IP address be combined with other user-related data. The IP addresses are anonymised so that allocation to your person is not possible (IP masking).
Your visit to this website is currently recorded by Matomo web analysis. Click https://matomo.org/docs/privacy/ to prevent your visit from being recorded
6. Social media / chat plug-ins
We use various plug-ins from social networks on our website in accordance with Art. 6 para. 1 sentence 1 f) GDPR for the purpose of making our company more widely known. The underlying commercial purpose shall be considered a “legitimate interest” within the meaning of the GDPR. Responsibility for operation in compliance with data protection guidelines shall be ensured by their respective provider. We use the so-called two-click method for the integration of these plug-ins in order to provide the best possible protection for visitors to our website.
Our website uses social media plug-ins for Facebook to personalise its use. To this end, we use the “LIKE” or “SHARE” button. This is an offering from Facebook.
When you access a page from our web presence that contains such a plug-in, your browser es-tablishes a direct connection to Facebook servers. The content of the plug-in is transmitted to your browser directly from Facebook and integrated into the website by the browser.
By integrating the plug-in, Facebook receives the information that your browser has accessed the respective page of our web presence, even if you do not have a Facebook account or are not logged in to Facebook at that moment. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.
Facebook can directly assign the visit to our website to your Facebook account if you are logged in to Facebook. When you interact with the plug-ins, for example by clicking the “LIKE” or “SHARE” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.
Facebook can use this information for advertising or market research purposes as well as for the user-oriented design of the Facebook pages. For this purpose, Facebook creates profiles on us-age, interests and relationships, for example to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services related to the use of Facebook.
If you do not want Facebook to connect the data concerning your visit to our website with your Facebook account, you must log off Facebook before visiting our website.
The purpose and scope of the data collection, further processing and use of the personal data by Facebook, as well as your corresponding rights and setting options for protecting your privacy, can be obtained in Facebook’s data protection information ( https://www.facebook.com/about/privacy/ ).
Our website includes plug-ins of the micro-blogging network provided by Twitter Inc. (Twitter). The Twitter plug-ins (tweet button) are identified by the Twitter logo on our website. An overview of the tweet buttons is available here ( https://about.twitter.com/resources/buttons ).
When you access a page on our website which contains such a plug-in, a direct connection is established between your browser and the Twitter server. Twitter thus receives the information that your IP address has accessed our website. If you are logged in to your Twitter account and you click the tweet button, you can link the contents of our pages with your Twitter profile. In this way, Twitter can connect the visit to our website to your account. We would like to point out that we, as the provider of the web pages, do not receive any information on the contents of the transmitted data and its use by Twitter.
If you do not want Twitter to link the visit to our website to your Twitter account, please log out of your Twitter account before visiting our website.
Further information on this is available in Twitter’s data protection information ( https://twitter.com/privacy ).
Our website uses plug-ins of the YouTube website operated by Google. The website is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
A connection to YouTube servers is established when you visit one of our web pages containing a YouTube plug-in. This informs the YouTube server which of our pages you visited.
If you are logged in to your YouTube account, YouTube is able to connect your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
The use of YouTube is in the interest of an appealing representation of our online offerings. This represents a legitimate interest within the meaning of Art. 6 para. 1 f) GDPR.
Further information on handling user data is available in YouTube’s data protection declaration at: https://policies.google.com/privacy?hl=en&gl=en .
Our website uses components of the LinkedIn network. LinkedIn is a service of LinkedIn Corpo-ration, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time our website equipped with a LinkedIn component is accessed, this component prompts your browser to download an image of this component from LinkedIn.
Through this process, LinkedIn is informed exactly which page of our internet presence is being accessed. By clicking the LinkedIn Recommend button while logged into your LinkedIn account, you can link content from our website to your LinkedIn profile. This allows LinkedIn to connect your visit to our website with your LinkedIn account.
We have no control over the data that LinkedIn collects in this manner, nor over the scope of the data that LinkedIn collects. We do not have any knowledge of the content of data transferred to LinkedIn. Details on data collection by LinkedIn as well as your rights and setting options can be obtained from LinkedIn’s data protection information. This information is available at http://www.linkedin.com/legal/privacy-policy .
Our website incorporates functions for the Instagram service. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. By clicking the Instagram but-ton while logged into your Instagram account, you can link content from our website to your In-stagram profile. In this way, Instagram can connect the visit to our website to your account. We would like to point out that we, as the provider of the web pages, do not receive any information on the contents of the transmitted data or its use by Instagram.
Further information on this is available in Instagram’s data protection declaration ( http://instagram.com/about/legal/privacy/ ).
Our website uses plug-ins for the Vimeo video portal. This service is provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
A connection to the Vimeo servers is established when you visit one of our web pages containing a Vimeo plug-in. This informs the Vimeo server which of our pages you have visited. Vimeo also receives your IP address. This applies even if you are not logged into Vimeo or do not have a Vimeo account. The data collected by Vimeo is transmitted to the Vimeo server in the USA.
If you are logged in to your Vimeo account, Vimeo is able to assign your surfing behaviour direct-ly to your personal profile. You can prevent this by logging out of your Vimeo account.
Further information on the handling of user data is available in Vimeo’s data protection declara-tion at: https://vimeo.com/privacy .
h) Google Fonts
This website uses Google Fonts provided by Google to enable consistent representation of fonts. When accessing a website page, your browser loads the required font to your browser cache in order to present texts and fonts properly.
For this purpose, the browser you use must connect to the Google servers. This informs Google that our website was accessed via your IP address. The use of Google Fonts is in the interest of a uniform and appealing representation of our online offerings. This represents a legitimate inter-est within the meaning of Art. 6 para. 1 f) GDPR.
Your computer will use a default font if your browser does not support Google Fonts.
Further information on Google Fonts is available at https://developers.google.com/fonts/faq and in Google’s data protection declaration: https://www.google.com/policies/privacy/ .
i) Google Maps
This website uses the Google Maps service via an API. The service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Your IP address has to be stored in order to use the Google Maps functions. This information is generally transmitted to a Google server in the USA and stored there. The provider of this website has no control over this data transmission.
The use of Google Maps is in the interest of an appealing representation of our online offerings and in the interest of a quick and easy identification of the locations we specify on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 f) GDPR.
Further information on the handling of user data is available in Google’s data protection declaration at: https://www.google.com/policies/privacy/
j) NAI Help Desk
This website uses a chat plug-in provided by drift.com, Inc. for the NAI Help Desk (www.drift.com), 222 Berkeley Street, Suite 600, Boston, MA 02116, USA. In the context of the collection of your data via the NAI Help Desk, drift.com Inc. is the processor within the meaning of Art. 28 GDPR. We cooperate with drift.com Inc. on the basis of a data processing contract that is designed to ensure that data processing at drift.com Inc. also meets the requirements of the GDPR and that you can have control over your personal data at any time. In this respect, we also refer you to the relevant information from drift.com Inc. on data protection at www.drift.com/privacy-policy/ .
7. Rights as an affected person
As an affected person, you have the following rights within the meaning of GDPR:
- In accordance with Art. 15 GDPR, you have the right to access the personal data pro-cessed by us. In particular, you may demand information on the purposes of the pro-cessing, the categories of personal data concerned, the categories of recipient to whom your personal data has been or will be disclosed, the envisaged period for which the per-sonal data will be stored, the existence of the right to request the rectification, erasure or restriction of processing or the right to object, the right to lodge a complaint with a super-visory authority, the source of the data if we did not collect it ourselves, the existence of automated decision-making, including profiling and any meaningful information on its details;
- in accordance with Art. 16 GDPR, you have the right to the rectification of inaccurate or incomplete personal data stored by us;
- in accordance with Art. 17 GDPR, you have the right to demand the erasure of personal data stored by us, provided the processing is not required for exercising the right of free-dom of expression and information, for compliance with a legal obligation, for reasons of public interest or the assertion, exercising or defending of legal claims;
- in accordance with Art. 18 GDPR, you can demand the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful, but you do not wish the data to be deleted, if we no longer require the data, but you need it for the assertion, exercising or defence of legal claims, or if you have objected to the processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR, you have the right to receive the personal data which you have provided to us in a structured, commonly used and machine-readable format, and you have the right to demand that the personal data is transmitted to another control-ler;
- in accordance with Art. 7 para. 3 GDPR, you have the right to withdraw your consent at any time. This results in our not being allowed to continue the data processing based on this consent in the future; and
- in accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervi-sory authority. Generally, you can contact the supervisory authority responsible for your place of habitual residence, place of work or for the registered office of our company.
8. The right to object
If your personal data has been processed based on legitimate interests in accordance with Art. 6 para. 1 sentence 1 f) GDPR, you have the right in accordance with Art. 21 GDPR to object to the processing of your personal data, provided reasons exist that arise from your particular situation or when the objection is aimed at processing for direct marketing purposes. In the latter case, you have a general right to object that will be implemented by us without the specification of a particular situation.
If you wish to take advantage of your right to withdraw or object, simply send an email to firstname.lastname@example.org.
9. Data security
During the website visit, we apply the widely used SSL (Secure Sockets Layer) procedure in combination with the highest available encryption level supported by your browser. This generally involves 256-bit encryption. If your browser does not support 256-bit encryption, we shall instead use 128-bit v3 technology. You can identify an individual page in our internet presence which is encrypted for transmission by the locked depiction of the key and lock icon in the lower status bar of your browser.
We also employ suitable technical and organisational security measures to protect your personal data against accidental or deliberate manipulation, partial or complete loss, destruction or unau-thorised access by third parties. Our security measures are subjected to ongoing improvement in line with technological development.
10. Up-to-dateness and amendments to this data protection declaration
This data protection declaration is currently valid and was updated in November 2018.
It may be necessary to amend this data protection declaration due to further development of our website and offers, or due to changes in legal or regulatory provisions. You can retrieve and print out the current data protection declaration at any time at https://www.nai-apollogroup.de/datenschutz .