I. Controller and Data Protection Officer
Stonehedge Beteiligungsgesellschaft mbH,
10711 Berlin, Germany
represented by its managing directors Nedeljko Prodanovic and Julian Helm
Tel.: (+49) 0 30 233 203 980
Fax: (+49) 0 30 233 203 989
Our company data protection officer may be contacted at Herbst | Bröcker, Lietzenseeufer 10, 14057 Berlin, Germany, Tel. 030/887 114 0 or at firstname.lastname@example.org.
II. Collection and Saving of Personal Data
1. When Opening Our Website
When opening our website www.stonehedge.de, information will automatically be transmitted to our website’s server by your browser. This information will be temporarily saved in a so-called log file. The following information will be collected and saved for three months, after which time it will be deleted automatically without any action on your part:
IP address of the requesting computer,
Time and date of access,
Name and URL of the retrieved file,
Website from which our website is accessed (referrer URL),
Your browser and operating system and the name of your access provider.
We will process this data for the following purposes:
Ensuring connectivity to our website,
Ensuring comfortable use of our website,
System security and stability assessments and
Other administrative purposes.
The legal basis for data processing is Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation. Our legitimate interest is established by the above-stated data collection purposes. Under no circumstances will the collected data be used for the purpose of drawing conclusions about you personally.
2. When Using Our Contact Form
Should you have any questions, you may contact us through the contact form on our website. We will save the information you provide when submitting requests to us through our contact form (your first name, name, email address, telephone number and message) and the requested real estate object to process your inquiry and contact you.
We process data to contact you on the basis of your voluntary consent in accordance with Art. 6 (1) Sentence 1 Letter a of the General Data Protection Regulation. The personal data we collect through our contact form will be deleted after the handling of your request is complete, unless we are required by law to save this data.
Revocation rights: You may revoke any consent you granted through the contact form at any time. Please submit your revocation by email to email@example.com or to the address in our imprint.
We strive to make use of our website pleasant and beneficial for our visitors. To achieve this, we collect data on user behavior to continuously improve our website. This data is collected through cookies, i.e., small text files transmitted through your browser and saved on your computer. Cookies do not retrieve information from your hard disk and do not impair your PC or your data. We primarily use so-called “session cookies.” Session cookies are deleted automatically when your visit ends. Other cookies will remain saved on your device until they are deleted by you. These cookies allow us to recognize your browser during your next visit.
When sending our newsletter, we use web beacons (small graphics files) to collect and statistically assess information.
The data processed by cookies is required for the stated purposes to safeguard legitimate interests of ours and of third-parties in accordance with Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation. Most browsers accept cookies automatically. However, you may configure your browser to disable cookies or to display notices before cookies are installed. However, please note that completely disabling cookies may prevent you from fully using every function of our website.
4. Google Analytics
The IP address transmitted by your browser through Google Analytics will not be merged with other Google data. You can prevent cookies from being saved at any time through your browser settings. However, please note that doing so may prevent you from using every function of this website. By using this website, you agree to have the data collected on you processed by in the described manner and for the stated purposes.
Furthermore, you can prevent the collection of cookie-generated data (including your IP address) on your use of the website and the processing of this data by Google by downloading and installing the browser plugin provided under the following link: http://tools.google.com/dlpage/gaoptout?hl=en. . You may also prevent data collection by Google Analytics by activating the following link which will install an opt-out cookie that will block any future collection of your data when visiting or website: https://tools.google.com/dlpage/gaoptout.
5. Social Media Plug-Ins
Our Internet presence uses social media plugins (“plugins”) of various providers on the basis of Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation to increase awareness of our company. These underlying advertising purposes represent legitimate interests in the sense of the General Data Protection Regulation. The respective providers are responsible for operating in accordance with data protection regulations. Plugins on our website employ the so-called double-click method to provide the best possible protection to visitors of our website.
Our website features the “Share” function of the network LinkedIn operated by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
When the “Share” button (“plugin”) is activated, your browser will establish a direct connection to LinkedIn’s server. This will notify LinkedIn that you visited our website with your IP address and allow LinkedIn to assign your visit to our website to you and your user account. We are not aware of the contents of or use by LinkedIn of transmitted (personal) data.
6. Third-Party Service and Content Inclusion
Our online offer may include third-party contents, e.g., videos provided through YouTube, maps through Google-Maps, RSS feeds or graphics of other websites. This requires the providers of these contents (hereafter referred to as “third-party providers”) to receive user IP addresses. Without an IP address, contents cannot be transmitted to the user’s browser. An IP address is therefore necessary for displaying these contents. We strive to only use contents whose providers merely use IP addresses to provide the respective contents. However, we cannot influence whether the third-party provider saves the IP address for, e.g., statistical purposes. We will notify our users accordingly to the best of our knowledge.
7. When Subscribing to Our Newsletter
We use our email newsletter to inform you about the services we offer and our company. If you subscribe to our newsletter and confirm your subscription by email, we will save your personal data (first name, name and email address) to regularly send you our newsletter (consent under Art. 6 (1) Sentence 1 Letter a of the General Data Protection Regulation).
We use MailChimp to send our newsletter. MailChimp is a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA.
Your personal data saved when you subscribe to our newsletter (first name, name, email address, IP address and the time and date of your subscription) will be transmitted to a server belonging to The Rocket Science Group in the USA. For more information about data protection when using MailChimp, please see: http://mailchimp.com/legal/privacy/.
You may unsubscribe from our newsletter at any time, e.g., by activating the link at the end of each newsletter, by emailing us at firstname.lastname@example.org or by contacting us by mail at the address in our imprint.
To design our newsletter according or our users’ needs, clicks on links featured in the newsletter will be registered, saved and assessed. If you do not want us to register your usage behavior, you may object to this data collection and use. Please submit your objections by email to email@example.com or to the address in our imprint. However, please note that submitting an objection will result in the cancellation of your newsletter subscription.
III. Contractual Relationship
Please note that we collect and save the personal data required for contract establishment and performance for this very purpose in accordance with the applicable legal regulations (Art. 6 (1) Sentence 1 Letter b of the General Data Protection Regulation). The data processed by us includes inventory data (e.g., names and addresses), contact data (e.g., email addresses and telephone numbers), contract data (e.g., commissioned services, contractual communication, names of contact persons) and payment data (e.g., bank details, payment history).
We will delete this data once it is no longer needed for contract performance or to fulfill legal obligations (especially guarantee obligations); apart from that, legal storage requirements apply (see Section IX).
IV. Data Security
We implemented suitable technical and organizational measures to ensure an appropriate level of security in accordance with Art. 32 of the General Data Protection Regulation and in consideration of the state of technology, implementation costs and the type, scope, circumstances and purpose of the processing and various likelihoods of occurrence and risk to the rights and freedoms of natural persons.
These measures especially include ensuring the confidentiality, integrity and availability of data by controlling physical access to the data and its retrieval, entry, forwarding and separation. In addition, we established a process that safeguards data subject rights, ensures data deletion and enables us to respond to threats. Furthermore, we already consider the protection of personal data when developing or selecting hardware, software and processes in accordance with data protection principles through according technical designs and data protection-friendly default settings (Art. 25 of the General Data Protection Regulation).
V. Data Transfers to Third Parties
Your personal data will not be transferred to third parties for purposes other than the following. We will only provide your data to third parties if:
You granted your express consent under Art. 6 (1) Sentence 1 Letter a of the General Data Protection Regulation,
The transfer is required by Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation to establish, exercise or defend legal claims and if there is no reason to believe that your interests in non-disclosure of your data outweigh our interests in the transfer,
The data is transferred as legally required under Art. 6 (1) Sentence 1 Letter c of the General Data Protection Regulation or if
Permitted by law and required under Art. 6 (1) Sentence 1 Letter b of the General Data Protection Regulation for contract performance.
VI. Data Subject Rights
If you would like to exercise the following rights, please submit your requests in writing to the controller or to the data protection officer specified in Section I.
1. Information About and Correction of Your Data
You have the right to demand information from us free of charge about whether and which personal data on you is saved by us. Should incorrect information about you be saved despite our best efforts to maintain accurate and up-to-date data, we will correct this without delay on your request.
2. Right to Deletion of Your Data
Furthermore, you may demand the deletion of the data we saved on you, unless its processing is required to exercise the right to free speech and information, to fulfill legal obligations, for reasons in the public interest or to establish, exercise or defend legal claims.
3. Right to Restrict the Processing of Your Data
You may demand the restriction of the processing of your personal data if you contest the accuracy of the data, if you refuse the deletion of the data even though its processing is unlawful, if we no longer require the data, but it is needed by you to establish, exercise or defend legal claims or if you submit an objection to the processing of the data under Art. 21 of the General Data Protection Regulation.
4. Right to Data Portability
You also have the right to receive the personal data you provide to us in a structured, customary and machine-readable format and to demand its transfer to another controller.
5. Right to Submit Complaints You may submit complaints to competent data protection supervisory authorities, e.g., the competent supervisory authority for your habitual residence or workplace or for our company.
VII. Objection Rights
If your personal data is processed on the basis of legitimate interests under Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation, you may object to the processing of your personal data in accordance with Art. 21 of the General Data Protection Regulation, provided that there are reasons for this that arise from your particular circumstances.
VIII. Revocation Rights
Under Art. 7(3) of the General Data Protection Regulation, you have the right to revoke any consent granted at any time with future effect.
IX. Data Deletion