PRIVACY POLICY

We take the protection of personal data seriously. This Privacy Policy will inform you about the purposes for which we collect, how we treat and to whom we may provide your personal data (e.g., your title, name, address, email address, telephone number).

I. Controller and Data Protection Officer

This Privacy Policy applies to data processed by:
Controller:
Stonehedge Beteiligungsgesellschaft mbH,
Kurfürstendamm 104
10711 Berlin, Germany
represented by its managing directors Nedeljko Prodanovic and Julian Helm

Tel.: (+49) 0 30 233 203 980
Fax: (+49) 0 30 233 203 989
Email: info@stonehedge.de
Website: www.stonehedge.de

Our company data protection officer may be contacted at Herbst | Bröcker, Lietzenseeufer 10, 14057 Berlin, Germany, Tel. 030/887 114 0 or at datenschutz@herbst-broecker.de.

II. Collection and Saving of Personal Data

1. When Opening Our Website

When opening our website www.stonehedge.de, information will automatically be transmitted to our website’s server by your browser. This information will be temporarily saved in a so-called log file. The following information will be collected and saved for three months, after which time it will be deleted automatically without any action on your part:

IP address of the requesting computer,
Time and date of access,
Name and URL of the retrieved file,
Website from which our website is accessed (referrer URL),
Your browser and operating system and the name of your access provider.

We will process this data for the following purposes:

Ensuring connectivity to our website,
Ensuring comfortable use of our website,
System security and stability assessments and
Other administrative purposes.

The legal basis for data processing is Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation. Our legitimate interest is established by the above-stated data collection purposes. Under no circumstances will the collected data be used for the purpose of drawing conclusions about you personally.

2. When Using Our Contact Form

Should you have any questions, you may contact us through the contact form on our website. We will save the information you provide when submitting requests to us through our contact form (your first name, name, email address, telephone number and message) and the requested real estate object to process your inquiry and contact you.

We process data to contact you on the basis of your voluntary consent in accordance with Art. 6 (1) Sentence 1 Letter a of the General Data Protection Regulation. The personal data we collect through our contact form will be deleted after the handling of your request is complete, unless we are required by law to save this data.

Revocation rights: You may revoke any consent you granted through the contact form at any time. Please submit your revocation by email to info@stonehedge.de or to the address in our imprint.

3. Cookies

We strive to make use of our website pleasant and beneficial for our visitors. To achieve this, we collect data on user behavior to continuously improve our website. This data is collected through cookies, i.e., small text files transmitted through your browser and saved on your computer. Cookies do not retrieve information from your hard disk and do not impair your PC or your data. We primarily use so-called “session cookies.” Session cookies are deleted automatically when your visit ends. Other cookies will remain saved on your device until they are deleted by you. These cookies allow us to recognize your browser during your next visit.

When sending our newsletter, we use web beacons (small graphics files) to collect and statistically assess information.

The data processed by cookies is required for the stated purposes to safeguard legitimate interests of ours and of third-parties in accordance with Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation. Most browsers accept cookies automatically. However, you may configure your browser to disable cookies or to display notices before cookies are installed. However, please note that completely disabling cookies may prevent you from fully using every function of our website.

4. Google Analytics

This website uses Google Analytics, a web analysis service of Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Google Analytics uses cookies. The information on your website use generated by the cookie is generally transmitted to a Google server in the USA where it is saved. If IP-anonymization is activated on our website, your IP address will be shortened by Google within member states of the European Union or in other states party to the European Economic Area Agreement. Only in exceptional cases will your full IP address be transferred to a Google server in the US and shortened there. We activated this IP anonymization for you and it is active on our website. On behalf of the operator of this website, Google will use this information to assess your use of this website, to compile reports about website activity and to perform additional services related to use of the website and the Internet for the website operator.

The IP address transmitted by your browser through Google Analytics will not be merged with other Google data. You can prevent cookies from being saved at any time through your browser settings. However, please note that doing so may prevent you from using every function of this website. By using this website, you agree to have the data collected on you processed by in the described manner and for the stated purposes.

Furthermore, you can prevent the collection of cookie-generated data (including your IP address) on your use of the website and the processing of this data by Google by downloading and installing the browser plugin provided under the following link: http://tools.google.com/dlpage/gaoptout?hl=en. . You may also prevent data collection by Google Analytics by activating the following link which will install an opt-out cookie that will block any future collection of your data when visiting or website: https://tools.google.com/dlpage/gaoptout.

5. Social Media Plug-Ins

Our Internet presence uses social media plugins (“plugins”) of various providers on the basis of Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation to increase awareness of our company. These underlying advertising purposes represent legitimate interests in the sense of the General Data Protection Regulation. The respective providers are responsible for operating in accordance with data protection regulations. Plugins on our website employ the so-called double-click method to provide the best possible protection to visitors of our website.

a) XING

Our website features the “XING Share Button” of XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. When opening this website, your browser will establish a short-term connection to the XING SE (“XING”) servers that provide the “XING Share Button” functions (especially the determination/display of the counter value). XING will not save personal data on your visit to this page. XING will especially not save IP addresses or use cookies to assess your use of the “XING Share Button.” For the respectively current data protection policy of the “XING Share Button” and additional information, please see: https://www.xing.com/app/share?op=data_protection

b) LinkedIn

Our website features the “Share” function of the network LinkedIn operated by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

When the “Share” button (“plugin”) is activated, your browser will establish a direct connection to LinkedIn’s server. This will notify LinkedIn that you visited our website with your IP address and allow LinkedIn to assign your visit to our website to you and your user account. We are not aware of the contents of or use by LinkedIn of transmitted (personal) data.

For the purpose and extent of data collection, further processing and use of data by LinkedIn and your respective rights and settings options for protecting your privacy, please see LinkedIn’s Privacy Policy:
https://www.linkedin.com/legal/privacy-policy

6. Use of Google Maps

Our website uses the map service “Google Maps” of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereafter: “Google.”

When using “Google Maps,” Google will install a cookie to process user settings and data when displaying the page that features “Google Maps.” This cookie will usually not be deleted when closing your browser, but will expire after a certain period, unless it is deleted manually.

If you do not want “Google Maps” to process your data, you may disable “Google Maps” to prevent data transfers to Google. To do so, please disable JavaScript on your browser. However, please note that doing so may prevent you from using “Google Maps” or from using “Google Maps” fully.

“Google Maps” and the data collected by “Google Maps” is used in accordance with the Google Terms of Service
https://policies.google.com/terms?hl=en&gl=de (German)

and the Google Maps Additional Terms of Service
https://maps.google.com/help/terms_maps.html.

7. Third-Party Service and Content Inclusion

Our online offer may include third-party contents, e.g., videos provided through YouTube, maps through Google-Maps (see Section II. 8), RSS feeds or graphics of other websites. This requires the providers of these contents (hereafter referred to as “third-party providers”) to receive user IP addresses. Without an IP address, contents cannot be transmitted to the user’s browser. An IP address is therefore necessary for displaying these contents. We strive to only use contents whose providers merely use IP addresses to provide the respective contents. However, we cannot influence whether the third-party provider saves the IP address for, e.g., statistical purposes. We will notify our users accordingly to the best of our knowledge.

8. When Subscribing to Our Newsletter

We use our email newsletter to inform you about the services we offer and our company. If you subscribe to our newsletter and confirm your subscription by email, we will save your personal data (first name, name and email address) to regularly send you our newsletter (consent under Art. 6 (1) Sentence 1 Letter a of the General Data Protection Regulation).

We use MailChimp to send our newsletter. MailChimp is a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA.

Your personal data saved when you subscribe to our newsletter (first name, name, email address, IP address and the time and date of your subscription) will be transmitted to a server belonging to The Rocket Science Group in the USA where it will be saved under adherence to the “EU-US Privacy Shield.” For more information about data protection when using MailChimp, please see: http://mailchimp.com/legal/privacy/.

For more information on the “EU-US Privacy Shield,” please see:
Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (German)
http://ec.europa.eu/justice/data-protection/international-transfers/eu-us-privacy-shield/index_en.htm.

You may unsubscribe from our newsletter at any time, e.g., by activating the link at the end of each newsletter, by emailing us at info@stonehedge.de or by contacting us by mail at the address in our imprint.

To design our newsletter according or our users’ needs, clicks on links featured in the newsletter will be registered, saved and assessed. If you do not want us to register your usage behavior, you may object to this data collection and use. Please submit your objections by email to info@stonehedge.de or to the address in our imprint. However, please note that submitting an objection will result in the cancellation of your newsletter subscription.

III. Contractual Relationship

Please note that we collect and save the personal data required for contract establishment and performance for this very purpose in accordance with the applicable legal regulations (Art. 6 (1) Sentence 1 Letter b of the General Data Protection Regulation). The data processed by us includes inventory data (e.g., names and addresses), contact data (e.g., email addresses and telephone numbers), contract data (e.g., commissioned services, contractual communication, names of contact persons) and payment data (e.g., bank details, payment history).

We will delete this data once it is no longer needed for contract performance or to fulfill legal obligations (especially guarantee obligations); apart from that, legal storage requirements apply (see Section IX).

IV. Data Security

We implemented suitable technical and organizational measures to ensure an appropriate level of security in accordance with Art. 32 of the General Data Protection Regulation and in consideration of the state of technology, implementation costs and the type, scope, circumstances and purpose of the processing and various likelihoods of occurrence and risk to the rights and freedoms of natural persons.

These measures especially include ensuring the confidentiality, integrity and availability of data by controlling physical access to the data and its retrieval, entry, forwarding and separation. In addition, we established a process that safeguards data subject rights, ensures data deletion and enables us to respond to threats. Furthermore, we already consider the protection of personal data when developing or selecting hardware, software and processes in accordance with data protection principles through according technical designs and data protection-friendly default settings (Art. 25 of the General Data Protection Regulation).

V. Data Transfers to Third Parties

Your personal data will not be transferred to third parties for purposes other than the following. We will only provide your data to third parties if:

You granted your express consent under Art. 6 (1) Sentence 1 Letter a of the General Data Protection Regulation,
The transfer is required by Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation to establish, exercise or defend legal claims and if there is no reason to believe that your interests in non-disclosure of your data outweigh our interests in the transfer,
The data is transferred as legally required under Art. 6 (1) Sentence 1 Letter c of the General Data Protection Regulation or if
Permitted by law and required under Art. 6 (1) Sentence 1 Letter b of the General Data Protection Regulation for contract performance.

VI. Data Subject Rights

If you would like to exercise the following rights, please submit your requests in writing to the controller or to the data protection officer specified in Section I.
1. Information About and Correction of Your Data
You have the right to demand information from us free of charge about whether and which personal data on you is saved by us. Should incorrect information about you be saved despite our best efforts to maintain accurate and up-to-date data, we will correct this without delay on your request.
2. Right to Deletion of Your Data
Furthermore, you may demand the deletion of the data we saved on you, unless its processing is required to exercise the right to free speech and information, to fulfill legal obligations, for reasons in the public interest or to establish, exercise or defend legal claims.
3. Right to Restrict the Processing of Your Data
You may demand the restriction of the processing of your personal data if you contest the accuracy of the data, if you refuse the deletion of the data even though its processing is unlawful, if we no longer require the data, but it is needed by you to establish, exercise or defend legal claims or if you submit an objection to the processing of the data under Art. 21 of the General Data Protection Regulation.
4. Right to Data Portability
You also have the right to receive the personal data you provide to us in a structured, customary and machine-readable format and to demand its transfer to another controller.
5. Right to Submit Complaints You may submit complaints to competent data protection supervisory authorities, e.g., the competent supervisory authority for your habitual residence or workplace or for our company.

VII. Objection Rights

If your personal data is processed on the basis of legitimate interests under Art. 6 (1) Sentence 1 Letter f of the General Data Protection Regulation, you may object to the processing of your personal data in accordance with Art. 21 of the General Data Protection Regulation, provided that there are reasons for this that arise from your particular circumstances.

VIII. Revocation Rights

Under Art. 7(3) of the General Data Protection Regulation, you have the right to revoke any consent granted at any time with future effect.

IX. Data Deletion

In accordance with Art. 17 and Art. 18 of the General Data Protection Regulation, we will delete or restrict the processing of data processed by us. If no deletion date is specified by this Privacy Policy, the data we save will be deleted once it is no longer needed for its intended purpose and if its deletion is not prevented by legal storage obligations. If data is not deleted because it is required for other legally permissible purposes, its processing will be restricted. This especially applies to data that must be stored for commercial or tax law purposes (Section 147 of the German Fiscal Code [Abgabenordnung, AO], Section 257 of the German Commercial Code [Handelsgesetzbuch, HGB]).

X. Privacy Policy Validity and Changes

This Privacy Policy is currently valid as of May 2018. However, due to developments of our website and respective offers or due to changed legal or official requirements, adjustments to this Privacy Policy may be necessary.