Privacy Policy

We are pleased that you are visiting our website. Protecting and safeguarding your personal information when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes it is used. This privacy policy applies to the online services of Härtl Real Estate GmbH, accessible under the domain www.haertlrealestate.de and its various subdomains (“our website”).

Who is responsible and how can you contact us?

Controller for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR):
Härtl Real Estate GmbH
Nördliche Münchner Straße 27a, 82031 Grünwald, Germany
Phone: +49 176 44427899
E-Mail: info@haertlrealestate.de
Management: Lorenz Härtl, Dipl.-Real Estate Economist (ADI), B.Sc. in Business Administration, B.Sc. in Psychology

No data protection officer is required to be appointed under the statutory provisions.

What is this about?

This privacy policy fulfills the legal requirements for transparency regarding the processing of personal data. Personal data means all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address, or user behavior when visiting a website. Information where we cannot (or only with disproportionate effort) establish a link to your person, e.g. by anonymization, is not considered personal data. Processing of personal data (e.g. collection, querying, use, storage or transfer) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of processing has been achieved and there are no legitimate reasons for further retention. We inform you in the individual processing operations about the specific storage periods or criteria for storage. Irrespective of this, we may store your personal data in individual cases for the establishment, exercise or defense of legal claims and in the event of statutory retention obligations.

Who receives my data?

We only pass on your personal data processed on our website to third parties if this is necessary for the fulfillment of the purposes and is covered in the individual case by the legal basis (e.g. consent or legitimate interests). In addition, we may disclose personal data to third parties if this serves the establishment, exercise or defense of legal claims. Possible recipients may include law enforcement authorities, lawyers, auditors, courts, etc. If we use service providers for the operation of our website who process personal data on our behalf as processors in accordance with Art. 28 GDPR, these may also be recipients of your personal data. Further details on the use of processors and web services can be found in the overview of the individual processing operations.

Do you use cookies?

Cookies are small text files that are sent by us to the browser of your device during your visit to our website and stored there. As an alternative to cookies, information can also be stored in your browser’s local storage. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable various analyses, such as recognizing your browser on a return visit and transmitting information to us (non-essential cookies).

With the help of cookies, we can make our website more user-friendly and effective, for example by tracking your use of our site and identifying your preferred settings (e.g. country and language). If third parties process information via cookies, this is collected directly via your browser. Cookies do not cause damage to your device, cannot execute programs and do not contain viruses.

We inform you about the individual services for which we use cookies in the respective processing operations. Detailed information about the cookies used can be found in the cookie settings or the consent manager of this website.

What rights do I have?

Under the provisions of the General Data Protection Regulation (GDPR), you as the data subject have the following rights:

• Access (Art. 15 GDPR) to the data stored about you including meaningful information about the processing and a copy of your data.
• Rectification (Art. 16 GDPR) of inaccurate or incomplete data stored by us.
• Erasure (Art. 17 GDPR) of your data unless processing is necessary for exercising freedom of expression, fulfilling a legal obligation, reasons of public interest or for the establishment, exercise or defense of legal claims.
• Restriction of processing (Art. 18 GDPR) where the accuracy of the data is contested, the processing is unlawful, we no longer need the data but you oppose erasure, or you have objected under Art. 21 GDPR.
• Data portability (Art. 20 GDPR) if you provided the data on the basis of consent or contract and it is processed by automated means; you can receive your data in a structured, commonly used, machine-readable format or have it transferred to another controller.
• Objection (Art. 21 GDPR) to processing based on Art. 6(1)(e,f) GDPR for reasons relating to your particular situation, or to direct marketing. No right to object exists if overriding legitimate grounds for processing can be demonstrated.
• Withdrawal (Art. 7(3) GDPR) of consent with effect for the future.
• Complaint (Art. 77 GDPR) to a supervisory authority if you believe that the processing of your data violates the GDPR.

How is my data processed in detail?

Provision of the website

Type and scope of processing

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a log file:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the file accessed
• Website from which the access is made (referrer URL)
• Browser used and, if applicable, the operating system of your computer as well as the name of your access provider

Our website is not hosted by us directly but by a service provider who processes the above data on our behalf under Art. 28 GDPR. The site is hosted by IONOS. The website is provided via WordPress.

Purpose and legal basis

Processing takes place for the purpose of displaying our website and ensuring stability and security based on Art. 6(1)(f) GDPR (legitimate interests). Collection and storage in log files is absolutely necessary for the operation of the website. Therefore, no right to object exists. If further retention is required by law, processing is based on Art. 6(1)(c) GDPR. There is no statutory or contractual obligation to provide the data, but the website cannot be accessed without providing it.

Storage period

The data mentioned above are stored for the duration of the display of the website and, for technical reasons, for up to 28 days thereafter.

Contact form

Type and scope of processing

On our website we offer you the opportunity to contact us via a form. Mandatory fields are necessary to process your request. You may also voluntarily provide further information. Data entered in the form will not be passed on to third parties.

Purpose and legal basis

Processing of your data through the contact form is carried out for communication and handling of your request on the basis of your consent (Art. 6(1)(a) GDPR). If your request relates to an existing contract with us, processing is based on Art. 6(1)(b) GDPR. There is no legal obligation to provide data, but we cannot process your request without it. If you prefer not to provide the data, please contact us via other channels.

Storage period

If you use the form on the basis of consent, we store the data of each request for three years after completion of your request or until you withdraw consent.

Instagram page

When visiting our Instagram page, Instagram collects, among other things, your IP address and other information stored in cookies on your device. This information is used to provide us as operators with statistics about the use of the page. Further details can be found at: https://facebook.com/help/pages/insights

Based on these statistics we cannot draw conclusions about individual users. We only use them to adapt our content and improve our online presence. We may collect data from you (e.g. name, message content, comments, public profile data) if you interact with us via Instagram.

Processing is based on our legitimate economic and communication interests (Art. 6(1)(f) GDPR). If you have consented to processing vis-à-vis Instagram, the legal basis is Art. 6(1)(a), Art. 7 GDPR. Actual data processing is carried out by Instagram/Facebook Ireland Ltd, Dublin, Ireland. Only Instagram has full access to your data. Therefore, rights such as erasure or access must usually be exercised directly with Instagram. Joint controllership agreement applies, see: https://www.facebook.com/legal/terms/page_controller_addendum

If you want to prevent linking of your data with your Instagram profile, log out of Instagram and delete your cookies before visiting our page.