privacy statement – How we deal with the subject of data protection
The data protection law is part of our personal rights. Especially in our constantly developing and networked world, the importance of these rights must not be underestimated. Keßler Real Estate Solutions GmbH attaches great importance to data protection law in all its forms and requirements, which is why we take the protection of your data very seriously and always endeavour to provide a corresponding level of protection on our website, https://www.kesslersolutions.de
You are free to use our website without disclosing your personal data. However, if you wish to make use of one of our services, in particular software solutions for commercial, technical and infrastructural management, via our website, it may happen that your data needs to be collected and processed. If this is the case and there is no legal basis for this processing, we will always obtain your consent for the respective process.
The processing of your personal data, for example your name, address, e-mail address or telephone number, is always carried out in accordance with the Basic Data Protection Regulation and in accordance with the country-specific data protection regulations applicable to us. We would like to inform you and the public about the type, scope and purpose of the personal data collected, used and processed by us in a comprehensible manner so that a comprehensive explanation of the subject of data protection is provided.
As the data controller, we have implemented numerous technical and organizational measures to ensure that the personal data processed via this website is protected as completely as possible. Since, despite all technical precautions, absolute protection cannot be completely guaranteed during data transmission, you are also free to transmit your personal data by other means, for example by telephone.
Data protection details
1. definitions according to DS-GVO
We use the following terms in this data protection declaration:
(a) personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). A natural person shall be considered identifiable if he can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more specific characteristics expressing the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
(b) Data subject
Data subject means any identified or identifiable natural person whose personal data are processed by the controller. In case of doubt, you are therefore a data subject.
Processing” means any operation or set of operations which is carried out with or without the aid of automated processes and which relates to personal data, such as collection, recording, organisation, sorting, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or association, qualification, erasure or destruction.
(d) Limitation of processing
Limitation of processing is the marking of stored personal data with the aim of limiting their future processing.
Profiling is any automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the work performance, economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or movement of that natural person.
Pseudonymisation means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the provision of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures ensuring that the personal data are not attributed to an identified or identifiable natural person.
(g) Controller or controller
The controller or data controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are laid down by Union law or by the law of the Member States, the controller or controllers may be designated in accordance with Union law or with the law of the Member States on the basis of specific criteria.
Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
The recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not that person is a third party. However, authorities which may receive personal data in the course of a specific investigation task under Union law or the law of the Member States shall not be considered as recipients.
(j) Third parties
Third party means any natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or processor.
Consent shall mean any voluntary, informed and unambiguous expression by the data subject of his or her will in the particular case, in the form of a statement or other unequivocal confirmatory act, indicating that he or she consents to the processing of his or her personal data.
2. who we are
Responsible for this website in the sense of the data protection basic regulation is:
Keßler Real Estate Solutions GmbH
Phone: +49 341 / 235 900
Fax: +49 341 / 235 90 – 15
Data Protection Officer:
3. what data and information we collect
(a) General data
Our website collects a number of general data and information from you each time you visit our website. These general data and information are stored in the log files of the server. The following data can be collected
(1) browser types and versions used,
(2) the operating system used by the accessing system,
(3) the website from which an accessing system accesses our website (so-called referrer),
(4) the subwebsites which are accessed via an accessing system on our website,
(5) the date and time of access to the website,
(6) an Internet Protocol (IP) address,
(7) the Internet service provider of the accessing system; and
(8) other similar data and information used to avert dangers in the event of attacks on our information technology systems.
When using these general data and information, our company does not draw any conclusions about you. Rather, this information is needed to
(1) to deliver the contents of our website correctly,
(2) to optimise the content of our website and the advertising for it,
(3) to ensure the long-term operability of our information technology systems and the technology of our website, and
(4) to provide law enforcement authorities with the information necessary for law enforcement in the event of a cyber attack.
This anonymously collected data and information is therefore evaluated by us both statistically and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimum level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all your personal data.
(b) personal data
Furthermore, it may occur that the following data is collected and processed within the framework of the use of our website, naturally with your knowledge and consent:
(1) inventory data such as surnames, first names and addresses,
(2) contact data such as telephone number, mobile phone number, electronic contact data (e-mail address)
c) Business-related data
In addition, it may happen that we process the following business-related data within the framework of website use with your consent:
(1) Contract data, such as customer categories, subject matter of the contract, contract periods and
(2) Payment data, e.g. bank details
(d) the purpose of the processing
The purpose of processing the above data is determined by the context of the visitor’s use of the website. Processing of the data may be necessary for the following reasons:
(1) Provision of the online offer, its functions and contents
(2) Responding to contact requests and communicating with users
(3) Provision of contractual services (conceptual and strategic consulting, campaign planning, software and design development / consulting or maintenance, implementation of campaigns and processes / handling, server administration, data analysis / consulting services and training services), customer care, marketing, advertising and market research
(4) Security measures
(5) Reach measurement/marketing/market research
(6) Maintenance of general business activities (administration, financial accounting, office organisation, archiving of data).
4. subscription to our newsletter
On our website you have the possibility to subscribe to the newsletter of our company. The personal data transmitted to the data controller when ordering the newsletter is determined by the input mask we use. We inform our customers and business partners about the company’s offers at regular intervals by means of a newsletter. The newsletter of our company can only be received by you if
(1) you have a valid email address and
(2) you register for the newsletter dispatch. For legal reasons, a confirmation e-mail will be sent to your e-mail address, which was entered for the first time for the newsletter dispatch, using the double opt-in procedure. This confirmation e-mail is used to check whether you have authorised receipt of the newsletter for the e-mail address.
When you register for the newsletter, we also save the IP address assigned by your Internet Service Provider (ISP) at the time of registration as well as the date and time of registration. The collection of this data is necessary in order to trace the (possible) misuse of your e-mail address at a later point in time and therefore serves to legally safeguard the data controller.
The personal data collected during registration for the newsletter will only be used to send you our newsletter. Furthermore, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or registration in this respect, as might be the case in the event of changes to the newsletter offering or changes to the technical conditions. The personal data collected as part of the newsletter service will not be passed on to third parties. You can cancel your subscription to our newsletter at any time. The consent to the storage of your personal data, which you have given us for the newsletter dispatch, can be revoked at any time. For the purpose of revoking your consent, you will find a corresponding link in every newsletter. Furthermore, it is also possible at any time to unsubscribe from the newsletter dispatch directly on the website of the controller or to inform the controller of this in any other way.
5. newsletter dispatch
We use newsletter tools on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f DSGVO and an associated contract for the processing of orders pursuant to Art. 28 para. 3 sentence 1 DSGVO.
(a) with Mailchimp
The standard dispatch of our newsletters is carried out by the dispatch service provider “MailChimp”, a newsletter dispatch platform of the US provider Racket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
Mailchimp can use the recipient’s data in pseudonymous form, i.e. without allocation to a user, to optimise or improve its own services, e.g. for technical optimisation of the dispatch and presentation of the newsletter or for statistical purposes. However, Mailchimp does not use this data of our newsletter recipients to write to you or to pass the data on to third parties.
(b) with Newsletter2Go
In autumn 2019, the Newsletter2Go newsletter software will be used on a trial basis. Your data will be transmitted to Newsletter2Go GmbH, based in 10179 Berlin. Newsletter2Go is prohibited from selling your data and from using it for purposes other than sending newsletters. Newsletter2Go is a German, certified provider, which was selected after the requirements of the data security basic regulation and the Federal Law for Data Protection. The import of addresses, the contents of the sent newsletters as well as the order to send the newsletters is carried out exclusively by Keßler Solutions as a corporate customer of Newsletter2Go.
Further information can be found here: https://www.newsletter2go.de/informationen-newsletter-empfaenger/.
6. newsletter tracking
Our newsletters contain so-called tracking pixels (“web beacon”). A tracking pixel is a miniature graphic that is embedded in emails that are sent in HTML format to enable log file recording and analysis. This allows statistical evaluation of the success or failure of online marketing campaigns. The embedded pixel-code tells us if and when your email was opened and which links in the email you viewed.
Such personal data collected via the pixel-code contained in the newsletters are stored and evaluated by the person responsible for processing in order to optimise the newsletter dispatch and to adapt the content of future newsletters even better to your interests. This personal data will not be passed on to third parties. You are entitled at any time to revoke the relevant separate declaration of consent given via the double opt-in procedure.
After a revocation these personal data are deleted by us. A deregistration from the receipt of the newsletter we automatically interpret as a revocation.
7. contact possibility over the Internet side
Due to legal regulations, our website contains information that enables us to contact our company quickly and electronically and to communicate directly with us, which also includes a general address of the so-called electronic mail (e-mail address).
If you contact us by e-mail or via our contact form, the personal data you provide will be stored automatically. Such personal data transmitted to us by you on a voluntary basis will be stored for the purpose of processing or contacting you. This personal data will not be passed on to third parties.
8. deletion and blocking of personal data
We process and store your personal data only for the period of time necessary to achieve the storage purpose or if this has been provided for by the European Directive and Regulation Body or another legislator in laws or regulations to which we are subject. To this end, we comply with Art. 17 and 18 DSGVO when deleting data.
To this end, for example, there is a legally prescribed retention obligation of 10 years in accordance with §§ 147 para. 1 AO, 257 para. 1 nos. 1 and 4, para. 4 HGB for books, records, management reports, accounting documents, trading books or documents relevant for taxation and 6 years in accordance with § 257 para. 1 nos. 2 and 3, para. 4 HGB for commercial letters.
If the storage purpose no longer applies or if a storage period prescribed by the European Directive and Ordinance Giver or another competent legislator expires, the personal data shall be blocked or deleted routinely and in accordance with the statutory provisions.
9. What rights do you have?
The European legislator has given you a number of possibilities within the framework of the Basic Data Protection Regulation to assert your rights – also vis-à-vis us. Your rights are set out below in order to comply with our duty to inform you accordingly:
(a) Right to confirmation
You have the right to request confirmation from us as to whether your personal data will be processed. If you wish to exercise this right of confirmation, you can contact our contact person below at any time.
(b) Right to information
You have the right at any time to receive from us free information about your stored personal data (e.g. the purpose of processing or the categories of data to be processed) and a copy of this information. If this is the case, you have the right to be informed about this personal data.
You also have a right to know whether your personal data has been transferred to a third country or to an international organisation. If this is the case, you also have the right to obtain information about the appropriate guarantees in connection with the transfer. If you would like to exercise this right to information, you can contact our contact person below at any time.
(c) Right to correction
You have the right to demand that we correct any incorrect personal data concerning you immediately. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data – also by means of a supplementary declaration. If you wish to exercise this right of correction, you can contact our contact person below at any time.
(d) Right to deletion (right to be forgotten)
You have the right to demand that we delete your personal data immediately. We are also obliged to delete personal data immediately if there is a reason which does not justify the processing of the data (e.g. personal data were collected for such purposes or processed in any other way for which they are no longer necessary).
If one of the above-mentioned reasons applies and you wish to have your personal data stored by us deleted, you can contact our contact person below at any time. He will arrange for your request for deletion to be complied with immediately.
If we have made your personal data public and are obliged to delete them, we will take appropriate measures, including technical measures, to inform those responsible for data processing who process the personal data that you have requested us to delete all links to this personal data or copies or replications of this personal data, taking into account the available technology and implementation costs.
(e) Right to limitation of processing
You have the right to demand that we restrict processing if one of the following conditions is met:
• The accuracy of the personal data is disputed by you for a period of time that allows us to verify the accuracy of the personal data.
• The processing is unlawful, you refuse the deletion of the personal data and demand instead the restriction of the use of the personal data.
• We no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
• You are welcome to object to the processing. We have filed an objection under Art. 21 Para. 1 DS-GVO and it is not yet clear whether our legitimate reasons outweigh yours.
If one of the above conditions is met and you wish to request the restriction of your personal data stored by us, you can contact our contact person below at any time.
We will notify you of any correction or deletion of your personal data or any restriction to processing, unless this proves impossible or involves disproportionate effort. We will inform you of these recipients if you so request.
(f) Right to data transfer
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another person in charge without being hindered by us, to whom the personal data have been provided. To assert your right to data transfer, you can contact our contact person below at any time.
(g) Right of opposition
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data concerning you on the basis of Art. 6 para. 1 letters e or f DS-GVO. This also applies to profiling based on these provisions.
We no longer process personal data unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
(h) Right to revoke consent under data protection law
You have the right to revoke your consent to the processing of personal data at any time.
If you wish to revoke your consent, you can contact the following address at any time:
Keßler Real Estate Solutions GmbH
Phone: +49 341 / 235 900
Fax: +49 341 / 235 90 – 15
Data protection officer: alittmann[at]kesslersolutions.de
10. registration on our website
You can create a user account on our website. During the registration process, the required mandatory data will be communicated to the users and processed on the basis of Art. 6 para. 1 lit. b DSGVO for the purpose of providing the user account. The processed data includes in particular the login information (name, password and an e-mail address). The data entered during registration will be used for the purposes of using the user account and its purpose.
You may be informed by e-mail about information relevant to your user account, such as technical changes. If users have terminated their user account, their data will be deleted with regard to the user account, subject to a statutory retention obligation. It is the responsibility of the users to secure their data before the end of the contract in the event of termination. We are entitled to irretrievably delete all user data stored during the term of the contract.
Within the scope of using our registration and login functions as well as the use of the user account, we store the IP address and the time of the respective user action. The storage takes place on the basis of our justified interests, as well as in your interest for the protection against abuse and other unauthorized use. A transfer of this data to third parties does not take place unless it is necessary to pursue our claims or there is a legal obligation to do so. Art. 6 para. 1 lit. c. DSGVO. The IP addresses will be anonymised or deleted after 7 days at the latest.
11. application possibility on our website
You have the possibility to apply for open positions on our website. The application is made by email including your application documents. We process the applicant data only for the purpose and within the framework of the application procedure in accordance with the legal requirements. The processing of the applicant data is carried out to fulfil our (pre)contractual obligations within the scope of the application procedure in the sense of Art. 6 Para. 1 lit. b. DSGVO Art. 6 para. 1 lit. f. DSGVO insofar as data processing becomes necessary for us, e.g. within the framework of legal proceedings (in Germany, § 26 BDSG additionally applies).
Applicant data usually includes your personal details, postal and contact addresses and the documents relating to your application, such as cover letters, curriculum vitae and certificates. In addition, applicants may voluntarily provide us with additional information.
By submitting your application to us, you consent to the processing of your data for the purposes of the application procedure in accordance with the type and scope set out in this data protection declaration. If special categories of personal data within the meaning of Art. 9 Para. 1 DSGVO are voluntarily provided as part of the application process, they will also be processed in accordance with Art. 9 Para. 2 lit. b DSGVO (e.g. health data, such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 para. 1 DSGVO are requested from applicants as part of the application procedure, their processing will also be carried out in accordance with Art. 9 para. 2 lit. a DSGVO (e.g. health data if they are required for the exercise of a profession).
In the event of a successful application, the data provided by you may be further processed by us for the purposes of the employment relationship. Otherwise, if the application for a job offer is not successful, the applicant’s data will be deleted. The applicant’s data will also be deleted if an application is withdrawn, which of course you can do at any time. Subject to justified revocation by the applicants, the data will be deleted after a period of six months so that we can answer any follow-up questions regarding the application and meet our obligations under the Equal Treatment Act to provide evidence.
12. we use Facebook
We have integrated a link to the company Facebook on our website. Facebook is a social network on which Keßler Real Estate Solutions GmbH can also be found and is available to you at any time. As a social network, Facebook enables its users to communicate with each other and to act in virtual space. It therefore also serves as a platform for the exchange of opinions and reports or enables the Internet community to provide personal or company-related information.
The operating company of Facebook is Facebook, lnc., 1 Hacker Way, Menlo Park, CA 94025, USA. If you live outside the United States or Canada, the person responsible for processing personal data is Facebook lreland Ltd., 4 Grand (anal Square, Grand (anal Harbour, Dublin 2, lreland.
Each time you access one of the individual pages on this website, which is operated by us and on which a Facebook link (Facebook plug-ins) has been integrated, your Internet browser is automatically prompted by the respective Facebook component to download a display of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=deDE . As part of this technical process, Facebook obtains information about which specific subpage of our website is visited by you.
If you are logged in to Facebook at the same time, Facebook recognizes which specific page of our website you have visited each time you visit our website and for the entire duration of your stay on our website. This information is collected by the Facebook component and assigned to your Facebook account by Facebook. If you click on one of the Facebook buttons integrated on our website, for example the “Like” button, or make a comment, Facebook assigns this information to your personal Facebook user account and saves this personal data.
Facebook receives information via the Facebook component that you have visited our website whenever you are logged in to Facebook at the same time as you visit our website; this takes place regardless of whether you click on the Facebook component or not. If you do not want this information to be transferred to Facebook in this way, you can prevent it from being transferred by logging out of your Facebook account before accessing our website.
13. we use Xing
Furthermore, we have integrated a link to Xing on our website. Xing is also a social network that allows registered users to connect with existing business contacts and make new business contacts. The individual users can create a personal profile of themselves at Xing. Companies can, for example, create company profiles or publish job offers on Xing.
Xing’s operating company is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.
By calling up our website on which the Xing button (Xing plug-ins) has been integrated, your Internet browser will automatically be prompted by the respective Xing component to download a representation of the corresponding Xing component from Xing. More information about the Xing plug-ins can be found at https://dev.xing.com/plugins. As part of this technical process, Xing obtains information about which specific subpage of our website you are visiting.
If you are logged in to Xing at the same time as visiting our website, Xing will recognize which specific subpage of our website you are still visiting. This information is collected by the Xing component and assigned to your Xing account by Xing.
Xing always receives information via the Xing component that you have visited our website if you are logged in to Xing at the same time as you access our website. This takes place regardless of whether you click on the Xing component or not. If you do not want personal data to be transmitted to Xing, you can prevent such transmission by logging out of your Xing account before accessing our website.
The data protection regulations published by Xing, which are available at https://www.xing.com/privacy, provide information about the collection, processing and use of personal data by Xing. Furthermore, Xing has published data protection notices for the XING Share button at https://www.xing.com/app/share?op=dataprotection.
14. we use Matomo
On our website we have integrated the tool Matomo (with anonymization function), an open source web analysis platform. Web analysis is the collection, collection and evaluation of data on the behaviour of visitors to websites. Among other things, a web analysis service collects data on which website you came from (so-called referrers), which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is mainly used for the optimisation of a website and for the cost-benefit analysis of internet advertising.
In this way we receive information about which browser type, which version and which operating system you are using. In addition, we learn your country of origin, date and time of your page visit, the number of pages visited, the time spent on our pages, the links you clicked on and your IP addresses, which we anonymise before storing. The collected data is usually deleted after six months.
The data is processed on the basis of our legitimate interests in optimising and analysing the profitability of our website. The legal basis is Art. 6 para. 1 lit. f DSGVO.
You can object to the anonymous data collection by Matomo at any time with effect for the future by clicking on the link below. A so-called opt-out cookie is stored in your browser so that Matomo no longer collects any session data. If you delete the cookies of your browser, however, this will also delete the opt-out cookie and you will therefore have to activate it again.
15. we use Google AdWords
Furthermore we have integrated Google AdWords on our website. Google AdWords is an Internet advertising service that allows advertisers to place ads both in Google’s search engine results and in the Google advertising network. Google AdWords allows us, as advertisers, to pre-define keywords that will be used to display an ad in Google’s search engine results only when the user uses the search engine to retrieve a keyword relevant search result. In the Google advertising network, the ads are distributed to topic-relevant Internet pages using an automatic algorithm and taking into account the previously defined keywords.
The operator of the Google AdWords services is Google lnc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is to promote our website by displaying advertisements of interest on third-party websites and in the search engine results of the Google search engine and by displaying third-party advertisements on our website.
If you reach our website via such a Google advertisement, a so-called conversion cookie is stored on your technological unit by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and does not serve to identify you. If the cookie has not yet expired, the conversion cookie is used to track whether certain subpages, such as the shopping cart of an online shop system, have been accessed on our website. Both we and Google can use the conversion cookie to track whether a person who came to our website via an AdWords ad generated sales, i.e. completed or cancelled a purchase.
The data and information collected through the use of the conversion cookie is used by Google to compile visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimise our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive information from Google that could be used to identify the person concerned. The conversion cookie is used to store personal information. Accordingly, each time you visit our website, your personal data, including the IP address of the Internet connection used, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may disclose personal data collected through this technical process to third parties.
Further information and the valid data protection regulations of Google can be called up under https://www.google.de/intl/de/policies/privacy/
16. will your data be passed on to third parties?
Disclosure to external parties will only take place if this is necessary within the framework of an order. It may therefore happen that we have to disclose your data to so-called contract processors or third parties in the course of processing, transfer them to them or otherwise grant them access to the data (e.g. transfer to payment service providers, suppliers, organisers, tax consultants, auditors). If this is the case, this will only be done on the basis of a legal permit, if you have consented, if a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
Due to the reach of the world wide web, your data may be processed in third countries (i.e. outside the European Union (EU) or the European Economic Area (EEA)). This occurs mainly in the context of the use of third-party services (e.g. web analysis services) or through the disclosure or transfer of data to third parties, if it serves to fulfil our (pre)contractual obligations, on the basis of your consent, a legal obligation or on the basis of our legitimate interests.
It goes without saying that we only allow data to be stored in a third country if the requirements of Art. 44 ff. of the German Data Protection Act are met. DSGVO. This means, for example, that the processing takes place on the basis of special guarantees, such as the officially recognised determination of a data protection level corresponding to the EU (e.g. for the USA by the “Privacy Shield”) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).
17. legal permission for data processing
The legal basis for the above mentioned processing operations is the Keßler Real Estate Solutions GmbH of Art. 6 1 lit.a DS-GVO, where we obtain your consent for a specific processing purpose. If the processing of personal data is necessary, for example, due to the fulfilment of a contract between you and us, this processing is justified by Art. 6 1 lit.b DS-GVO. The same applies to such processing operations which are necessary for the implementation of pre-contractual measures, for example in cases of inquiries regarding our products or services.
If our company is subject to a legal obligation requiring the processing of personal data, such as for the fulfilment of tax obligations, the processing is based on Art. 6 1 lit. c DS-GVO.
In addition, it may happen that the processing of personal data becomes necessary in order to protect your vital interests or the interests of another natural person.
Ultimately, processing operations could be based on Art. 6 1 lit. f DS-GVO. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that your interests, fundamental rights and fundamental freedoms do not prevail. Such processing operations are permitted to us in particular because they have been specifically mentioned by the European legislator. This would be the case, for example, if you were a customer of our company. (Recital 47 sentence 2 DS-GVO).
18. our legitimate interest
If the processing of personal data is based on Article 6 1 lit. f DS-GVO, our legitimate interest is the conduct of our business for the benefit of all our employees and shareholders.
19. duration of storage
The criterion for the duration of the storage of personal data is the respective legal retention period. After this period has expired, the corresponding data will be routinely deleted unless they are no longer required for the fulfilment or initiation of the contract.
20. obligation to provide personal data
We will inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may result from contractual provisions (e.g. information on the contractual partner). In addition, it may be necessary for a contract to be concluded that you provide us with personal data, which must subsequently be processed by us. For example, you are obliged to provide us with personal data when our company concludes a contract with you. Failure to provide personal data would mean that the contract could not be concluded.
You should contact one of our employees before providing your personal data. Our employee will explain to you on a case-by-case basis whether the provision of your personal data is required by law or contract or is necessary for the conclusion of a contract, whether there is an obligation to provide the personal data and what consequences the non-availability of the personal data would have.
21. Do we use profiling?
Finally, we would like to inform you that we do not use automatic decision making or profiling.
22. supervisory authority and complaint
If you wish to contact a public body regarding your queries regarding data protection, you can address your concerns and inquiries to the Saxon data protection officer:
Saxon data protection commissioner
P.O. Box 12 00 16
Phone: +49 351 / 493 – 5401
Fax: +49 351/493 – 5490
23. your contact person in our company
Should you have any questions regarding data protection and the handling of your data on our website and our company, please feel free to contact us at any time:
Keßler Real Estate Solutions GmbH
Phone: +49 341 / 235 900
Fax: +49 341 / 235 90 – 15
Data protection officer: alittmann[at]kesslersolutions.de
Translated with https://www.deepl.com/translator (free version)