A. Basic Information

Thank you very much for your interest in our website. The protection of your privacy is very important to us. We are aware of the great importance to the protection of your personal data and your right to informational self-determination.

We´d like to inform about the collection and processing of personal data when using our website. Personal data are all data that can be related to you personally, e.g. name, address, e-mail address.

1. Controller

Responsible for data protection in accordance with Art. 4 No. 7 of the General Data Protection Regulation (GDPR):

COMPLEMUS Real Estate GmbH
Rheinpromenade 10
40789 Monheim am Rhein
Telefon: +49 (0) 2173 26402-0
Email: vasb@pbzcyrzhf.qr

Datenschutzbeauftragter: c.zngvp@pbzcyrzhf.qr

Further information and contact details as well as additional legal notices can be found on www.complemus.de under “Legal Notice”.

2. Data and system security

We protect our website and systems making use of technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons.

In connection with access to our website, data that may allow identification (e.g. IP address) is temporarily stored on our servers for data and system security purposes, but in principle for no longer than 30 days. The processing of possibly personal data for data and system security purposes is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f) GDPR and our legitimate interest in securing our systems and preventing misuse.

3. Principles for the storage and deletion of personal data

Personal data will only be processed for the period required to achieve the respective storage purpose or if this is provided for in the laws or regulations applicable to us, e.g. commercial or tax storage obligations. If a storage purpose or a legally prescribed storage period expires, affected personal data will be deleted routinely and according to the legal regulations or their processing is restricted, e.g. limited processing within the scope of commercial or fiscal storage obligations.

The processing of personal data on the basis of a legal obligation, namely the fulfilment of legal storage obligations, is based on Art. 6 para. 1 sentence 1 lit. c) GDPR. If and to the extent that personal data pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR is processed for the purpose of preserving evidence, these processing purposes shall cease after expiry of the statutory limitation periods; the statutory regular limitation period shall be three years.

For further details on specific storage and deletion periods, we also refer to respective service descriptions or information in this data protection declaration.

B. Visiting our website

If you use our website for information purposes only, i.e. if you do not register for our services or do not otherwise provide us with personal information, we may collect personal data that your browser transmits to our server.

1. Technical provision

When you visit our website, we collect the following data, which is technically necessary for us to display our website to you and to guarantee the stability and security of our online offer:

• IP address
• date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• the amount of data transferred in each case
• Website from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software.

The legal basis for this collection and processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interest refers to the provision of a functional website and its system security. In addition, we use the aforementioned data in non-personal form for statistical purposes and to improve our online services.

2. Cookies

Our website uses cookies. Cookies are small text files that are stored on a computer system via an Internet browser.

Many websites and servers use cookies. Cookies often contain a so-called cookie ID. Such an ID is a unique identifier for the cookie and consists of a string of characters through which websites and servers can be assigned to a specific Internet browser in which the cookie was stored. Such cookies make it possible to distinguish your individual browser from other Internet browsers that contain other cookies. A particular Internet browser can therefore be recognized and identified by a unique cookie ID.

By using cookies, we can provide you with more user-friendly services that could not or only to a limited extent be implemented without cookies. Basically, we have limited the use of cookies to so-called essential cookies, which are necessary for the provision of a functional and comfortable online service; this concerns in particular a cookie for the language settings as well as a cookie for the realisation of an opt-in in the context of the use of Google Maps and Youtube videos (cf. below under point 3). Cookies are used on the basis of Art. 6 para. 1 sentence 1 lit. f) GDPR. In this respect, we have a legitimate interest in the provision and optimisation of functional and convenient online services.

You can prevent the setting of cookies by setting your Internet browser and thus permanently object to the setting of cookies. In addition, cookies that have already been set can be deleted via an Internet browser or other software programs. However, please note that if you deactivate cookies in your Internet browser, you may not be able to use all the functions of our and other online services.

Klick here to change your cookie settings.

3. Google Services

3.1 Google Maps

We make use of Google Maps from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, a service for displaying interactive maps, on our website.

When you access the websites on which Google Maps is integrated, certain information, in particular your IP address, the browser software you use and its settings are collected by Google, transmitted to the USA and stored. Google collects and stores this data on its own responsibility and evaluates it for its own purposes. You can view Google's terms of use at https://policies.google.com/terms?hl=de&gl=de and the additional terms of use for Google Maps at https://www.google.com/intl/en_US/help/terms_maps/. Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"): https://policies.google.com/privacy?hl=en&gl=en. If you wish to object to data collection and processing by Google LLC, you can set this at https://adssettings.google.com/authenticated.

By using the route planning function of GoogleMaps, you agree to the one-time data processing for the realisation of the route planning. The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR. Google Maps is also used to protect our legitimate interests in a convenient online offer in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR. You can also give your consent to the use of GoogleMaps directly via our cookie banner; in this case, an opt-in cookie is set (to change cookie settings, see section B 2). The legal basis in this respect is also Art. 6 para. 1 sentence 1 lit. a) GDPR.

3.2 Youtube

We integrate videos from the "Youtube" platform of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA on our website. When playing the video, Youtube sets cookies to collect information about user behaviour. These are used, for example, to improve the user-friendliness of Youtube's services and to prevent misuse. If you have a Google account and are logged in to it, the videos you watch will be assigned to your Google account. The processing of data by Google is governed by any contractual relationship that may exist between you and Google or by Google's data protection policy, which you can access at https://policies.google.com/privacy?hl=en&gl=en. There you will also find information about the data protection policy of Google. There you will also find information about your statutory right of revocation against the processing.

By clicking on the play button of a YouTube video embedded on our websites, you consent to the one-time data processing for playing the corresponding video. The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR. The integration of Youtube videos is also carried out to protect our legitimate interests in a convenient online offer in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR. You can also give your consent to the use of Youtube videos directly via our cookie banner; in this case, an opt-in cookie is set (to change cookie settings, see section B 2). The legal basis in this respect is also Art. 6 para. 1 sentence 1 lit. a) GDPR.

To stop data processing by Youtube, you can contact Google directly. Further information can be found at https://policies.google.com/privacy?hl=en&gl=en.

C. Use of Services

Personal data is collected and processed when you provide it when you subscribe to our newsletter service or communicate with us using the contact options provided (e.g. for recruiting).

1. Communication

On our website we offer various ways to get in touch with us and to send us messages. In particular, you can also contact us by telephone or e-mail.

If you contact us accordingly, we will store and process the data you provide (e.g. your e-mail address, if applicable your name and your telephone number) in order to process your request. The legal basis in this respect is Art. 6 para. 1 sentence 1 lit. b) and f GDPR. Our legitimate interests refer to an efficient and structured collection and processing of inquiries. We delete the accruing data after the storage is no longer necessary, or limit the processing, if legal storage obligations exist.

2. Career

Under section “Career” of our website we inform about our job offers and training opportunities. You can send us your application documents via the e-mail addresses provided in each case. When sending confidential information, please ensure that it is sent securely in your own interest or use the option of sending password-protected files.

The personal data transmitted within the scope of an application will be processed for the purpose of processing corresponding enquiries or applications. If an employment contract is concluded, the data transmitted will be stored and further processed for the purpose of processing the employment relationship in accordance with the statutory provisions. If no employment relationship is concluded, the application documents will be deleted as soon as further storage is no longer necessary to safeguard our legitimate interests, basically six month following to the end of application procedure. A legitimate interest in this sense exists in particular with regard to a burden of proof in a possible procedure according to the German General Equal Treatment Act (AGG). The legal basis for processing is Art. 6 para. 1 sentence 1 lit. b) and f) GDPR.

D. Rights of the data subject

We would be happy to inform you about your rights under the GDPR as “data subject”. Thereafter, you have the following rights with respect to the personal data that concerns you:

• right of access (Art. 15 para. 1, 2 GDPR)
• right to rectification (Article 16 GDPR) and right to erasure (Article 17 GDPR)
• the right to restriction of processing (Article 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object (Article 21 GDPR)
• right to withdraw (Art. 7 para. 3 GDPR)
• right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

In addition, we summarise the key points of the rights of those affected under the GDPR. Please, be aware that this presentation is not exhaustive, but merely addresses basic information of the rights under the GDPR:

1. Right of access by the data subject

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:

• the purposes of the processing;
• the categories of personal data concerned;
• the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
• the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
• the right to lodge a complaint with a supervisory authority;
• where the personal data are not collected from the data subject, any available information as to their source;
• the existence of automated decision-making, including profiling, referred to in Art. 22 para. 1 and 4 GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form.

2. Right to rectification

The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

3. Right to restriction of processing

The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:

• the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
• the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
• the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
• the data subject has objected to processing pursuant to Article 21 para. 1 GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

4. Right to erasure

The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• the data subject withdraws consent on which the processing is based according to Art. 6 para. 1 sentence 1 lit. a) GDPR or Art. 9 para 2 lit. a) GDPR, and where there is no other legal ground for the processing;
• the data subject objects to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 para. 2 GDPR;
• the personal data have been unlawfully processed;
• the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
• the personal data have been collected in relation to the offer of information society services referred to in Art. 8 para. 1 GDPR.

5. Right to data portability

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where: the processing is based on consent pursuant to Art. 6 pra. 1sentence 1 lit. a) GDPR or Art. 9 para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 sentence 1 lit. c) GDPR; and the processing is carried out by automated means.

In exercising his or her right to data portability pursuant to paragraph Art. 20 para. 1 GDPR, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

6. Right to withdraw

The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof.

7. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes GDPR.

Local data protection supervisory authority responsible for us is: LDI – Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestr. 2-4, 40213 Düsseldorf.

8. Rights to object (Art. 21 (1), (2) GDPR

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on Art. 6 para. 1 sentence 1 lit. e) or f) GDPR, including profiling based on those provisions.  The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.

E. Contact

You can contact us at any time to exercise your rights as a data subject or if you have general questions about data protection:

COMPLEMUS Real Estate GmbH
Rheinpromenade 10
40789 Monheim am Rhein
Telefon: +49 (0) 2173 26402-0
Email: vasb@pbzcyrzhf.qr