Privacy notice

The following privacy notice will inform you of how personal data is processed when you use our website (https://www.schierrealestate.de) and how to contact us. Personal data means all data that relates to you personally, such as your name, address, email addresses and user behaviour. This privacy notice tells you how we process it and also how we comply with our legal obligations, specifically under the EU General Data Protection Regulation (GDPR).

A. Controller

Controller pursuant to GDPR Art. 4(7)

Schier Real Estate GmbH
Opernplatz 14
60313 Frankfurt am Main

Telephone: +49 (0) 170 4814719
Email: ms@schierrealestate.de

represented by its Managing Director Marcus Gregor Schier-Eisenbeis

You can contact our data protection officer by email at ms@schierrealestate.de and by post at our postal address, adding “Data protection officer”.

B. Data processing for contacts outside our website, including job applications

(1) If you contact us outside our website, e.g. by letter, fax, telephone or email, the data transmitted by you (e.g. your surname, first name and address) and the information transmitted, together with any other personal data contained therein, is processed for the purpose of contacting you and dealing with your request.

(2) If your request is related to the performance of a contract or is necessary to take steps prior to entering into a contract, the legal basis for processing your personal data in this way is GDPR Art. 6(1)(b) (in conjunction with Federal Data Protection Act [BDSG] §26(1) in the case of a job application). In all other cases, your data is processed on the basis of our legitimate interest in the effective processing of enquiries addressed to us (GDPR Art. 6(1)(f)) or on any consent that you may have given (GDPR Art. 6(1)(a)).

(3) The data transmitted will remain with us until you ask us to erase it or the purpose for which it is stored ceases to apply. If you take part in a job application process and your application is unsuccessful, we normally retain your personal data for up to six months after receipt of the application. It is retained specifically for evidential purposes in case of a legal dispute. If it becomes necessary to store the data after the end of that 6-month period (e.g. due to an imminent or pending legal dispute), it will not be erased until the reason for its continued storage no longer applies.

It will continue to be stored if this is required by law, in particular to comply with statutory retention obligations or if we have a legitimate interest in continuing to store it.

C. Data processing via our website

1. Hosting the Website

We host our website on Strato. The provider is Strato AG, Otto-Ostrowski-Strasse 7, 10249 Berlin (referred to below as Strato). When you visit our website, Strato collects various log files, including your IP addresses. For more information, see Strato’s privacy statement: https://www.strato.de/datenschutz/.
We use Strato on the basis of GDPR Art. 6(1)(f). We have a legitimate interest in presenting our website as reliably as possible. If a consent to processing has been granted, it takes place exclusively on the basis of GDPR Art. 6(1)(a); consent can be revoked at any time.

2. Processing of personal data when you visit our website

If you use our website purely for information purposes, in other words if you simply view it without registering or otherwise providing information to us, we process the personal data that your browser transfers to our server. This information is as follows:

  • IP address of the requesting computer
  • Date and time of visit
  • Time difference from Greenwich Mean Time (GMT)
  • Content of your request (the page visited)
  • Access status / HTTP status code
  • Amount of data transferred in each case
  • Page previously visited (referrer URL)
  • Browser
  • Operating system
  • Browser software
  • language and version.

This information is also stored on the servers in log files. This data is not stored together with other personal data.
It is necessary to collect the IP address and store it temporarily to allow our website to be delivered to your device. For this purpose, your IP address must be stored for the duration of your visit to our website. Storing data in log files serves to ensure the functionality and optimisation of our website, and also to ensure the security of our information technology systems. It must therefore be processed by us. The legal basis for this is GDPR Art 6(1), 1st sentence point (f).

3. Contact via our website including job applications

(1) When you contact us by email, the data communicated by you (your email address, and your surname, first name, phone number, address and company, if applicable) are stored by us so that we can answer your questions and deal with your concerns.

(2) If your request is related to the performance of a contract or is necessary to take steps prior to entering into a contract, this data is processed on the basis of GDPR Art. 6(1)(b) (in conjunction with Federal Data Protection Act §26(1) in the case of a job application). In all other cases, your data is processed on the basis of our legitimate interest in the effective processing of enquiries addressed to us (GDPR Art. 6(1)(f)) or, in respect of any data given to us voluntarily, with your consent (GDPR Art. 6(1)(a)).
It will continue to be stored if this is required by law, in particular to comply with statutory retention obligations or if we have a legitimate interest in continuing to store it.

(3) If we use contractors instructed by us for the purpose of individual aspects of our service, or if we wish to use your data for advertising purposes, we shall always take care when selecting and overseeing such contractors, and will inform you in detail below about the procedures which will apply. We will also inform you of the criteria used to determine how long your data is stored.

D. Data erasure and storage time

(1) If no explicit storage period is specified below, your personal data will be erased or blocked as soon as the purpose for which, or the legal basis on which, it is stored ceases.

(2) However, we may store it beyond the specified time in the event of an (imminent) legal dispute with you or another legal procedure, or if such storage is provided for by statutory provisions to which we are subject as the controller (e.g. Commercial Code [HGB] §257 or Tax Code [AO] §147). If the storage period prescribed by such legal provisions expires, your personal data will be blocked or erased unless it is necessary for us to continue to store it and there is a legal basis for so doing.

E. Data security

We use appropriate technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by third parties (e.g. TSL encryption on our website), having regard to the state of the art, the cost of implementation and the extent to which, the context in which and the purpose for which the data is processed and the nature of that processing, as well as the risks of a data breach (including its likelihood and impact) for the data subject. Our security measures are continually improved in line with technological developments.

We will be pleased to provide you with further information on this subject on request. Please contact us using the above contact details.

F. Collaboration with contract processors, transfer of personal data to third parties and communication to third parties

(1) Like many companies, we also use German and foreign external contractors to handle our business transactions (e.g. in the fields of IT, logistics, telecommunications, sales and marketing). They work as contract processors exclusively in accordance with our instructions and they are subject to contractual obligations in accordance with GDPR Art. 28, requiring them to comply with the data protection rules.

(2) The following categories of recipients, which are usually contract processors, may be granted access to your personal data:

  • Contractors engaged for the operation of our website and the processing of the data stored or transmitted by the systems (e.g. for data centre services, payment processing and IT security). In that case, the legal basis for the transfer is GDPR Art. 6(1), 1st sentence point (b) or (f), insofar as they are not contract processors;
  • Government bodies/authorities, insofar as necessary to fulfil a legal obligation. In that case the legal basis for the transfer is GDPR Art. 6(1), 1st sentence point (c).
  • Persons engaged to carry out our business operations (e.g. auditors, banks, insurance companies, legal advisers, supervisory authorities or parties involved in company acquisitions or in setting up joint ventures). In that case, the legal basis for the transfer is then GDPR Art. 6(1), 1st sentence point (b) or (f).

(3) Your personal data will not be transmitted to third parties for purposes other than those listed. We disclose your personal data to third parties only if:

  • you have given your express consent to do so, pursuant to GDPR Art. 6(1), 1st sentence point (a),
  • it is necessary to disclose it in accordance with GDPR Art. 6(1), 1st sentence point (f) for the purpose of asserting, exercising or defending legal claims and there is no reason to believe that you have an overriding legitimate interest in the non-disclosure of your data,
  • if there is a legal obligation to disclose it, pursuant to GDPR Art. 6(1), 1st sentence point (c),
  • or it is legally permissible and necessary for the performance of contractual relations with you in accordance with GDPR Art. 6(1), 1st sentence point (b).

G. No automated decision-making (including profiling)

We do not intend to use personal data collected from you for an automated decision-making process (including profiling).

H. Your Rights

(1) You can assert your rights against us as a data subject in relation to your personal data which is processed by us against us at any time, using the contact details provided in this privacy notice. As a data subject, you have the right:

  • under GDPR Art. 15, to obtain information as to your data which is processed by us;
  • under GDPR Art. 16, to require the rectification of inaccurate data, or that incomplete data stored with us is completed;
  • under GDPR Art. 17, to require the erasure of data stored with us;
  • under GDPR Art. 18, to require us to restrict the processing of your data;
  • under GDPR Art. 20, to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another data controller (“data portability”);
  • under GDPR Art. 21, to object to processing, provided that the processing is carried out on the basis of GDPR Art. 6(1), 1st sentence point (e) or (f);
  • under GDPR Art. 77 GDPR, to complain to a data protection supervisory authority about the processing of your personal data in our company, for example to our competent data protection supervisory authority: the Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hesse Commissioner for Data Protection and Freedom of Information), represented by Prof. Dr. Alexander Rossnagel, Gustav-Stresemann-Ring 1, 65189 Wiesbaden poststelle@datenschutz.hessen.de

(2) If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation affects the legality of processing your personal data only after you have notified it to us. It has no effect on the legality of processing your data before you revoked your consent.

(3) You can object to us processing your personal data where we do so based on a balancing of interests. That is the case where processing is not necessary, in particular for the performance of a contract with you, as we illustrate in the description of each of the functions. If you raise such an objection, we ask you to explain the reasons why we should not process your personal data in the way that we have done. If you raise an objection, we will examine the situation and will either discontinue or adapt the processing of your data, or point out to you our compelling legitimate reasons on the basis of which we will continue to process it.

(4) Of course, you can object at any time to the processing of your personal data for the purposes of advertising and data analysis. The best way to raise an objection to advertising is to use the contact details given above.

I. Changes to this privacy notice

Our privacy notice is regularly checked in case it needs to be adapted or supplemented as data protection law develops and technological or organisational changes arise. You will be informed of any changes, in particular on our website at https://www.schierrealestate.de

This privacy notice is correct as at October 2022.