Privacy policy of CAPERA Immobilien Service GmbH (as at: 21.11.2022)
At this point, we would like to inform you about the processing of your personal data in connection with your visit to the website “https://www.capera-immobilien.de” (the “Website”). The protection of privacy and your personal data is important to us.
1. RESPONSIBLE BODY
The controller within the meaning of the General Data Protection Regulation (“GDPR”) with regard to the processing of personal data in connection with the website is (unless otherwise stated in this privacy policy) the:
CAPERA Immobilien Service GmbH
Dornhofstrasse 100
63263 Neu-Isenburg
Phone: +49 6102 81544-100
Fax: +49 6102 81544-19101
E-mail: info@capera-immobilien.de
Website: https://www.capera-immobilien.de
2. DATA PROTECTION OFFICER
You can reach our data protection officer under the following contact options:
CAPERA Immobilien Service GmbH
Data Protection Officer
Schülerstraße 40
07545 Gera
Phone: +49 365 55214 344
E-mail: datenschutz@capera-immobilien.de
Any data subject can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.
3. PROCESSING OF YOUR DATA
(i) processing of data when using the website for informational purposes only
If you only use the website for informational purposes, i.e. if you do not actively transmit information to us, we do not collect any personal data (subject to the further information in this data protection declaration), with the exception of the data that your browser automatically transmits, in particular to enable you to visit the website. This includes e.g:
– IP address of the requesting computer
– Date and time of access
– Amount of data transferred in each case
– Browser type and browser version
– Operating system used
– Referrer URL
The aforementioned processing of personal data is basically carried out for the purpose of enabling the use of the website (connection establishment) or to improve the attractiveness and usability of the website and, if necessary, to recognize technical problems and malfunctions on the website at an early stage.
Individual data (information relating to the browser; see above) is stored in individual cases for a maximum period of four weeks. Insofar as the processing of the aforementioned data is personal data, the corresponding processing of this data is based on Art. 6 para. 1 p. 1 lit. f GDPR (legitimate interest; the legitimate interest follows from the aforementioned purposes).
(II) CONTACT FORMS
If you contact us via the contact forms provided on the website, the personal data you provide in this context (such as your name and e-mail address) will be processed in order to respond to your request.
The legal basis for the processing of the aforementioned personal data is Art. 6 para. 1 p. 1 lit. f GDPR (legitimate interests; the legitimate interest arises from the fact that the action desired by the user (e.g. answering an inquiry) can only be carried out through corresponding data processing). If the contact is aimed at the conclusion of a contract, then (additionally) Art. 6 para. 1 p. 1 lit. b GDPR (contract fulfillment or pre-contractual measures) Legal basis for the processing.
All information is therefore provided voluntarily and is collected directly from you as the data subject. Your voluntarily provided personal data will be stored for the purpose of processing your request and any follow-up questions that may arise and for contacting you if necessary in this context. This personal data will not be passed on to third parties.
The same applies to contacting us by e-mail, telephone or post. Please note that additional data resulting from the selected communication channel (e-mail address or transmitted telephone number) may be collected.
The data is processed on the basis of Art. 6 I lit. a GDPR (consent) for the voluntary information and Art. 6 para. 1 lit. f GDPR (legitimate interest) for the use of the data for processing the request.
We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. termination of the contractual relationship). Mandatory statutory provisions – in particular retention periods – remain unaffected.
(III) APPLICATIONS
You can apply for open positions by e-mail. The purpose of the data collection is the selection of applicants for the possible establishment of an employment relationship. In order to process your application, we collect the data you provide (usually first and last name, e-mail address, application documents such as references and CV, earliest possible starting date and salary expectations). We would like to point out that confidentiality cannot be guaranteed if applications are sent unencrypted by e-mail. As a rule, you can also apply for our jobs by post or directly on site. The legal basis for the processing of your application documents is Art. 6 para. 1 p. 1 lit. b and Art. 88 para. 1 GDPR in conjunction with § 26 para. 1 SENTENCE 1 BDSG.
If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for 6 months from the end of the application process (rejection or withdrawal of the application). The data is then deleted and the physical application documents are destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.
Longer storage, usually max. 12 months, may also take place if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if statutory retention obligations prevent deletion.
Please note that encrypted and/or signed communication may not be possible via the contact channels provided. It is advisable to send sensitive information by post.
(IV) COOKIES
The website partly uses so-called cookies. Cookies are small text files that are stored on your computer and saved by your browser.
We use so-called session cookies to recognize that you have already visited individual pages of our website. Session cookies are only stored for the duration of your visit to the website and are automatically deleted when you close the browser or leave the website. These cookies do not contain any personal data, but merely identify the browser used to access the website. They are used to make the website more user-friendly, effective and secure and to make it easier for you to navigate through the website.
We also use so-called temporary cookies. These make it possible to store specific, device-related information on the user’s access device (PC, smartphone, etc.), even beyond a single session. They are used, for example, to retain page settings for future visits to the website. These cookies remain stored on your end device for a maximum period of four weeks (usually for a shorter period). These cookies enable us to recognize your browser the next time you visit our website.
The aforementioned cookies are used as far as possible to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping basket function). The legal basis for the corresponding processing of personal data is Art. 6 para. 1 p. 1 lit. f GDPR (legitimate interest; the legitimate interest follows from the above-mentioned purposes, in particular optimization of website use).
As a rule, you can configure your browser so that no cookies are stored or a message always appears before a new cookie is created. However, deactivating cookies may mean that you cannot (fully) use all the functions of our website.
Insofar as other cookies or cookie-like tools (e.g. tools for analyzing your surfing behavior) are used on or in connection with the website, these are treated separately in this data protection declaration (see in particular. below under point 3 (V)).
We use the “Real Cookie Banner” consent tool to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents. Details on how “Real Cookie Banner” works can be found at https://devowl.io/de/rcb/datenverarbeitung/.
The legal basis for the processing of personal data in this context is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.
(V) IT THEMES SECURITY
This website uses the “iThemes Security” tool. In this context, the IP address of visitors to the website is processed in particular in order to detect malicious activities and protect the website from certain types of attacks. The IP addresses are only stored in one of our local databases and are not transmitted to third parties. The legal basis for the corresponding processing of personal data is Art. 6 para. 1 p. 1 lit. f GDPR (legitimate interest; the legitimate interest is that we need to protect the website against corresponding attacks by third parties).
(VI) GOOGLE TOOLS
GOOGLE ANALYTICS
The website uses Google Analytics, a web analysis service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (“Google”) – (with regard to your visit to the website) if you give your consent when you visit the website (for the first time). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on the website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
This website uses IP anonymization in the aforementioned sense.
You can prevent the storage of cookies (after giving your consent) by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of the website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
You can find more information about Google Analytics here:
http://www.google.com/analytics/terms/de.html http://www.google.de/intl/de/policies/privacy/
and at Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA.
GOOGLE MAPS
On this website, you may be able to use content from Google’s “Google Maps” service. Each time “Google Maps” is called up, Google sets a cookie to process user settings and data when displaying the page on which “Google Maps” is integrated. As a rule, this cookie is not deleted when you close the browser, but only expires after a certain period of time, unless you delete it manually beforehand. If you do not agree to this processing of your data, you have the option of deactivating the “Google Maps” service and thus preventing the transfer of data to Google. To do this, you must deactivate the Java Script function in your browser. However, we would like to point out that in this case you will not be able to use “Google Maps” or only to a limited extent. However, the data processing described above will only be carried out (with regard to your visit to the website) if you give us your consent to do so when you visit the website (for the first time). If you do not give such consent, Google Maps content will not be available on the website or will only be available to a limited extent.
Further information on the purpose and scope of data collection and processing by Google can be found in Google’s privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy
GOOGLE ADS
We use Google Ads from Google to draw attention to our attractive offers with the help of advertising material (so-called Google Ads) on external websites. We can determine how successful the individual advertising measures are in relation to the advertising campaign data. We do this in order to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.
These advertising materials are delivered by Google via so-called “ad servers”. For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Ads will store a cookie on your PC. These cookies generally lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.
These cookies enable Google to recognize your Internet browser. If a user visits certain pages of an Ads customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked via the websites of Ads customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of ads, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.
You can prevent participation in this procedure in various ways:
a) by setting your browser software accordingly; in particular, the suppression of third-party cookies means that you will not receive any ads from third-party providers;
b) by deactivating the interest-based ads of the providers that are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies;
c) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin.
We would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
GOOGLE WEBFONTS
This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google web fonts are installed locally on our server (in this respect, data processing may take place as described above under section 3(I); see also the information there on the relevant legal basis). A connection to Google servers does not take place.
INTEGRATION OF YOUTUBE VIDEOS
On this website, we may embed YouTube videos from the online video platform “YouTube” of the operator YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, which are stored on YouTube servers and can be played directly from our website (YouTube, LLC is a subsidiary of Google).
The videos are integrated in the so-called extended data protection mode, which means that personal data about you as a user is only transmitted to YouTube when you play the videos. We have no influence on this data transmission. This data transfer takes place regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google at the same time, your data will be assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out before playing the video (or already waive their consent to the corresponding data processing when (first) accessing the website; see below). YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
In addition, when the website is accessed (for the first time), a notification window opens, which also contains information about YouTube content on the website. The aforementioned data processing will only take place if you give your consent in this context (if you do not give such consent, YouTube content will not be available on the website or will only be accessible).
Further information on the purpose and scope of data collection and its processing by YouTube can be found in the YouTube privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.
FURTHER INFORMATION ON THE TOOLS MENTIONED IN ITEM 3(VI)
The legal basis for the aforementioned processing of your personal data in connection with Google Analytics, YouTube and Google Maps is Art. 6 para. 1 p. 1 lit. a GDPR (consent; you can revoke the corresponding consent at any time with effect for the future).
The legal basis for the aforementioned processing of your personal data in connection with Google Ads is Art. 6 para. 1 p. 1 lit. f GDPR (legitimate interests). The legitimate interest here is that we have a legitimate economic interest in understanding whether and how (often) the website is used and how we can successfully advertise. The interests of website users, on the other hand, are not affected in this context, or only to a very limited extent (as the data processed in this context is difficult to attribute and no particularly critical data is processed). Against this background, our legitimate interests outweigh the interests of the user.
Personal data may be processed by you in the USA in connection with the aforementioned tools (see above). Google has committed to complying with the Privacy Shield agreement between the EU and the USA published by the US Department of Commerce on the collection, use and storage of personal data from EU member states. Google has declared through certification that it complies with the relevant Privacy Shield principles. The EU Commission assumes that the United States guarantees adequate legal protection for personal data that is transferred from the EU to self-certified organizations in the USA within the framework of the Privacy Shield. Further information can be found at: https://www.privacyshield.gov/EU-US-Framework.
(VII) USE OF SOCIAL MEDIA PLUGINS
Plugins from social networks are used on our pages (e.g. from Facebook, Twitter, Instagram, XING, LinkedIn; further information on the tools used can be found below).
You can recognize these plugins on the website by the respective social media logos. Some of the tools we use (Twitter, Facebook, Instagram, LinkedIn, Matterport) would in principle (without the precautions we have taken) transmit certain personal data to the providers of these plugins directly when you visit the website. To prevent this, we only use plugins from such providers in conjunction with the so-called “Avada” solution. This application prevents the plugins integrated on the website from transferring data to the respective provider of the plugins when you first enter the website.
Only when you activate the respective plugin by clicking on the corresponding button will a connection to the provider’s server be established. As soon as you activate the plugin, the respective provider generally receives the information that you have visited the website with your IP address. In this case, if you are logged into your respective social media account (e.g. Facebook) at the same time, the respective provider may be able to assign the visit to the website to your user account.
The activation of the plugin described above constitutes consent to the aforementioned processing of personal data (you give your consent by pressing the corresponding button; Art. 6 para. 1 sentence 1 lit. a GDPR; you will find further information in the immediate vicinity of the corresponding buttons). You can revoke this consent at any time with effect for the future.
The website uses share plugins from the social network Facebook, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins can be recognized by one of the Facebook logos (e.g. white “f” on a blue tile, the terms “Like”, “Gefällt mir” or a “thumbs up” sign).
When a user activates a corresponding Facebook plugin by clicking on the corresponding button, their browser establishes a direct connection with the Facebook servers (see the details above under “Use of social media plugins”).
A share plugin from LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA is integrated on our website. LinkedIn is a social network that enables users to connect with existing business contacts and make new business contacts.
When a user activates a LinkedIn plugin by clicking on the corresponding button, their browser establishes a direct connection with LinkedIn’s servers (see the details above under “Use of social media plugins”).
LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible for data protection matters outside the USA. Further information on the LinkedIn plug-ins can be found at https://developer.linkedin.com/plugins. The applicable data protection provisions of LinkedIn may be retrieved under https://www.linkedin.com/legal/privacy-policy.
The website uses a so-called “share button” of XING AG, Gänsemarkt 43, 20354 Hamburg, Germany. If you click on the corresponding button, a connection to the Xing servers is established via your browser. Your personal data relating to your visit to this website will not be stored. In particular, XING does not store any IP addresses. Nor is your usage behavior evaluated. The current information on data protection with regard to the Xing share button and other relevant information can be found at https://www.xing.com/app/share?op=data_protection.
Our website uses share plugins from the Twitter service of Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.
With the help of this plugin it is possible, for example, to share a post or a page of this website via Twitter or to follow us on Twitter. Individual tweets in particular can be integrated into the website as additional content.
When a user activates a corresponding Twitter plugin by clicking on the corresponding button, their browser establishes a direct connection with the Twitter servers (see the details above under “Use of social media plugins”).
Further information on this can be found in Twitter’s privacy policy at http://twitter.com/privacy.
Our website uses share plugins from Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an Instagram logo, for example in the form of an “Instagram camera”.
When a user activates a corresponding Instagram plugin by clicking on the corresponding button, their browser establishes a direct connection with Instagram’s servers (see the details above under “Use of social media plugins”).
For more information on the purpose and scope of data collection and the further processing and use of data by Instagram, as well as your rights in this regard and settings options for protecting your privacy, please refer to Instagram’s privacy policy at https://help.instagram.com/155833707900388/.
MATTERPORT
We use components of the video and photo network provider Matterport on our website. Matterport is a service of Matterport, Inc, 352 East Java Drive, Sunnyvale, CA 94089, USA.
When a user activates a corresponding Matterport plugin by clicking on the corresponding button, their browser establishes a direct connection with the Matterport servers (see the details above under “Use of social media plugins”).
Further information on data protection and Matterport can be found at https://matterport.com/legal/privacy-policy/.
FURTHER INFORMATION ON THE ABOVE TOOLS
The operators of the services Twitter, Instagram and Matterport mentioned above under section 3 (VI) process your personal data (possibly also) in the USA.
Twitter and Matterport have undertaken to comply with the Privacy Shield agreement between the EU and the USA published by the US Department of Commerce on the collection, use and storage of personal data from EU member states. These providers have declared through certification that they comply with the relevant Privacy Shield principles. The EU Commission assumes that the United States will provide adequate legal protection for personal data transferred from the EU to self-certified organizations in the US under the Privacy Shield. Further information can be found at: https://www.privacyshield.gov/EU-US-Framework
Instagram ensures an adequate level of data protection in third countries outside the EU (e.g. the USA) by implementing sufficient guarantees, including the so-called standard contractual or standard data protection clauses approved by the EU Commission with regard to data transfers from the EU to the USA. Further information on this can be found at https://help.instagram.com/519522125107875. Further information on the standard contractual clauses used by Instagram can be obtained from Instagram.
4. DISCLOSURE OF DATA TO THIRD PARTIES
The personal data collected in the course of using the website will – subject to other cases expressly described in this data protection declaration – not be passed on to third parties or transmitted in any other way without your consent.
We may use (technical) service providers who process personal data on our behalf (e.g. IT service providers, web hosts). These service providers process the relevant personal data exclusively in accordance with our instructions (processors). The legal basis for such data processing is Art. 28 GDPR (order processing) in conjunction with, as a rule, Art. 6 para. 1 p. 1 lit. f GDPR (legitimate interest; see above for the corresponding legitimate interests).
We may disclose your personal data to third parties if we are legally obliged to do so (e.g. at the request of a court or law enforcement agency). The legal basis for such data processing is Art. 6 para. 1 sentence 1 lit. c GDPR (legal obligation).
5. DURATION OF THE STORAGE OF YOUR PERSONAL DATA
Insofar as no other storage period results from the other provisions of this data protection declaration, we only store your personal data obtained by us in connection with the use of the website for as long as this is necessary in particular to process your inquiries to us or only for the period necessary to achieve the purpose of storage, thereafter only to the extent and insofar as we are obliged to do so due to mandatory statutory storage obligations. If we no longer need your data for the purposes described above, it will only be stored for the respective statutory retention period and will not be processed for other purposes.
6. RIGHTS OF DATA SUBJECTS
As the data subject, you have the fundamental right to information about which personal data has been stored about you. Unless your request conflicts with a legal obligation to retain data, you have the right to have incorrect data corrected and to have your personal data deleted or its processing restricted. If the processing is based on consent (pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR), this consent can be revoked at any time for the future without affecting the legality of the processing carried out on the basis of the consent until revocation. You also have a right to data portability.
To exercise these rights, please contact the controller.
You also have the option of contacting the supervisory authority directly. For CAPERA Immobilien Service GmbH, this is the Hessian Commissioner for Data Protection and Freedom of Information (https://www.datenschutz.hessen.de/).
7. SECURITY OF YOUR DATA
The data you transmit to us is protected by suitable technical and organizational means in order to protect it from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously monitored and improved in line with technological developments and organizational possibilities.