The protection of your privacy and the lawful processing of your personal data are particularly sensitive and responsible matters for us. On this page, we would like to transparently explain how we handle your data and provide you with detailed information in the following privacy policy about how your personal data is processed.

As of: 27.11.2020

 

OVERVIEW OF DATA COLLECTION ON OUR WEBSITE

 

What data is collected?

On our website, your personal data is collected to ensure a pleasant visit and, if necessary, to rent a room in a shared apartment. This includes all information that relates to an identified or identifiable person, meaning information that can be individually attributed to you. Examples include your name, address, phone number, email address, or IP address.

Who is responsible for data collection on our website?

The data processing on www.graeve-wohnen.de is carried out by the operator Gräve Wohnen. Our contact details can be found in the site notice of this website.

How do we collect your data?

Your data is collected firstly by you providing it to us. This could be, for example, data that you enter into an order form. Other data is automatically collected or with your consent when you visit the website by our IT systems. This mainly includes technical data (e.g., internet browser, operating system, or the time of page access). The collection of this data occurs automatically as soon as you access this website.

For what purpose do we use your data?

Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time to receive free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. For this and any further questions regarding data protection, you can contact us at any time using the contact details provided in the imprint.

Analysis tools and third-party tools

When visiting this website, your browsing behavior can be statistically evaluated. This is primarily done using so-called analysis programs. Detailed information about these analysis programs can be found in the following sections of our privacy policy.

HOSTING AND CONTENT DELIVERY NETWORKS (CDN)

 

External Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This mainly includes IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses, and other data generated through a website. The use of the host is for the purpose of fulfilling our contractual obligations towards our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of the secure, fast, and efficient provision of our online offer by a professional provider (Art. 6 Para. 1 lit. f GDPR). Our host will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions regarding this data.

Conclusion of a contract for order processing

To ensure data protection-compliant processing, we have concluded a contract for order processing with our host.

 

NOTICES AND MANDATORY INFORMATION

 

Data Protection

Gräve Wohnen, as the operator of this website, takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this is done. We would like to point out that data transmission over the internet (e.g., when communicating via email) can have security vulnerabilities. Complete protection of the data from access by third parties is neither feasible nor reasonable for the operator.

Notice Regarding the Responsible Party

The responsible party for data processing on this website is:

Gräve Wohnen
Frank Gräve (Sole Proprietor)
Weingarten 9
59069 Hamm

If you have any questions about data protection, please contact:

Dominik Gräve
Weingarten 9
59069 Hamm

Contact:

Email: mail@graeve-wohnen.de
WhatsApp: +49 1573 2955744
Phone: +49 1573 2955744

The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke an already given consent at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

If the data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which the processing is based can be found in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims (objection according to Art. 21(1) GDPR). If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising purposes; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection according to Art. 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, the data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Right to Data Portability

You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done to the extent technically feasible.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as bookings or inquiries you send to us as the operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address line changes from “http://” to “https://” and by the lock symbol in your browser line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, Deletion, Correction

Within the framework of the applicable legal provisions, you have the right at any time to receive free information about your stored personal data, its origin, and recipients, and the purpose of the data processing and, if applicable, a right to correct or delete this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address provided in the imprint.

Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time at the address provided in the imprint for this purpose. The right to restrict processing exists in the following cases:

• If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
• If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
• If you have filed an objection according to Art. 21(1) GDPR, a balance must be struck between your and our interests. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or to assert, exercise, or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.

 

COLLECTION AND USE OF DATA ON OUR WEBSITE

 

Cookies

Our websites use so-called “cookies.” Cookies are small text files and do not harm your end device. They are either temporarily stored on your device for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your device until you delete them or your web browser automatically deletes them. In some cases, cookies from third-party companies may also be stored on your device when you visit our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g., cookies for processing payment services). Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or the display of videos). Other cookies are used to evaluate user behavior or display advertising. Cookies required to carry out the electronic communication process (necessary cookies) or to provide certain functions you have requested (functional cookies, e.g., for the shopping cart function) or to optimize the website (e.g., cookies for measuring web audiences) are stored based on Art. 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies has been requested, the storage of the relevant cookies is based solely on this consent (Art. 6(1)(a) GDPR); consent can be revoked at any time. You can set your browser to inform you about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited. Insofar as cookies from third-party companies or for analysis purposes are used, we will inform you separately in this privacy policy and, if necessary, request your consent.

Contact via Email or Contact Form

If you contact us by email or contact form, your details from the electronic correspondence, including the contact data you provide, will be stored by us for processing the request and in case of follow-up questions. We do not pass on this data without your consent. The processing of this data is based on Art. 6(1)(b) GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested. The data you provide in the email or contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

General Administration and Management of Office, Contacts, and Finances

In the context of administrative tasks and the organization of our operations, financial accounting, and compliance with legal obligations, such as archiving, we use the data you provide. We process the same data that we process as part of our contractual services. The processing bases are Art. 6(1)(c) GDPR, Art. 6(1)(f) GDPR. Customers, interested parties, business partners, and website visitors are affected by the processing. The purpose and our interest in the processing lie in the administration, financial accounting, office organization, and data archiving; thus, fundamental matters that are essential for maintaining our business activities, fulfilling our tasks, and providing our services. Deletion of the data concerning contractual services and communication is carried out following the specifications mentioned in these processing activities. In this context, we disclose or transmit data to the tax authorities, consultants, such as tax advisors or auditors, and other fee agencies and payment service providers. We also store information based on our business interests regarding property management, owners, and other business partners, e.g., for later contact. These predominantly company-related data are generally stored permanently without any time limit.

Internal Analyses and Market Research with a Business Background

To pursue our natural entrepreneurial goals, such as running our business profitably or more profitably, recognizing market trends or wishes of our contract partners and interested parties, we analyze the data available to us on business transactions, contracts, inquiries, and similar matters. We process inventory data, communication data, contract data, payment data, usage data, and metadata based on Art. 6(1)(f) GDPR, whereby the persons affected include contract partners, interested parties, customers, visitors, and users of our services. The analyses are carried out for the purpose of economic evaluations, marketing, and market research. In doing so, we may consider the profiles of registered persons with information, e.g., on the services they have used. The analyses serve us to increase customer friendliness, optimize our offer, and economic efficiency. The analyses are solely for our benefit and are not disclosed externally to any third party unless they are anonymous analyses with aggregated values. Provided that these analyses or profiles are personal, they will be deleted or anonymized upon termination of the customers, otherwise after two years from the conclusion of the contract. Furthermore, the overall economic analyses and general trend determinations are created with careful discretion and, where possible, anonymously to the greatest extent possible.