Data protection declaration

1 Privacy policy

1.1 Introduction

The protection of your personal data is very important to us. The information required by the General Data Protection Regulation (GDPR) for the processing of your personal data can be found further down this page, sorted according to categories of data subjects.

We are happy to answer any questions you may have about data protection and the processing of your data. You can send your request to our data protection team at datenschutzteaminstone "«@&.de .

1.2 Contact details of the controller

Instone Real Estate Group SE
Grugaplatz 2-4
45131 Essen
Germany

Tel.: +49 201 453550
Fax: +49 201 45355-934
Email: infoinstone "«@&.de
 

1.3 Contact details of the data protection officer

The data protection officer
c/o Instone Real Estate Group SE
Grugaplatz 2-4
45131 Essen
Germany
Email: datenschutzbeauftragterinstone "«@&.de

1.4 Rights of data subjects

If we process your personal data, as the data subject you have the rights listed below. For the purpose of exercising these rights, if necessary, contact the data protection team at Instone Real Estate Development GmbH at the email address datenschutzteaminstone "«@&.de :

1.4.1 Right to information, Article 15 GDPR

1.4.2 Right to rectification or, Article 16 GDPR

1.4.3 Right to deletion, Article 17 GDPR

1.4.4 Right to restriction of processing, Article 18 GDPR

1.4.5 Right to data portability Article 20 GDPR

1.4.6 Right to withdraw consent, Article 7 para. 3 GDPR

If you have given us your consent to the processing of your personal data, you have the right to revoke this consent at any time with effect for the future.

1.4.7 Right of objection, Article 21 GDPR

Insofar as we process your personal data on the basis of Article 6 para. 1 lit. e (public interest) or lit. f (legitimate interest of the processor), you have the right to object to the processing at any time for reasons that arise from your particular situation. In the case of processing for the purposes of direct advertising or related profiling (Article 21 para. 2), the objection does not require any special reasons.

1.4.8 Right of appeal to a supervisory authority, Article 77 GDPR

2 Privacy information for website users

2.1 Scope of application

The privacy information applies to the following website:

instone.de

2.2 Purpose of processing and legal basis

When you visit our website, certain data are transmitted to our web server by the browser for the purpose of displaying the information provided correctly:

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status / HTTP status code
  • Amount of data transferred
  • Website from which the request came
  • Browser, language and version of the browser software
  • Operating system and its interface
  • Referring website

When you visit our website, third party companies collect certain anonymous information. These third party companies can use the non-personal information to offer you advertisements about goods and services that are likely to interest you. Cookies and/or web beacons (small invisible graphics that can be used to record, collect and evaluate simple actions such as visitor traffic on the website) can be used for this purpose. You can visit  WWW.NETWORKADVERTISING.ORG find out more about this kind of commercial advertising.

The legal basis for the data processing described above for the purpose of providing and tailoring our website to requirements is Article 6 para. 1 lit. b and/or Article 6 para. 1 lit. f.

2.3 Categories of recipients

Your data will only be processed in our systems and will not be passed on to third parties. Depending on which functionalities of our website you use, it may happen that we share your personal data with service providers or cooperation partners.

In the following, we state the categories of possible recipients of your personal data:

  • If necessary, payment service providers and banks, when processing payments,
  • IT service providers for the administration and hosting of our website, the dispatch of newsletters and the operation of our IT systems,
  • Legal advisers in asserting claims,
  • Distribution partners
  • Service providers who record initial contact data on our behalf

2.4 Cookies

When you visit our website, we may also store information on your computer in the form of a “cookie”. “Cookies” are small text files that are copied onto your hard drive by a web server. Cookies contain information that can later be read by a web server in the domain in which the cookie was issued to you. The cookies we use do not contain any personal data.

We use so-called session cookies and so-called persistent cookies. Most of the cookies we use are so-called session cookies, which are required to keep your visit consistent, i.e. to ensure that, for example, your information is retained during the session. These session cookies are automatically deleted at the end of the session.

Persistent cookies remain on your device for a longer period of time and enable us to use the web analysis tools described below.

The following cookies are used on the website:

Cookie

Purpose

Validity period

_ga

Google Analytics

2 years

_gid

Google Analytics

1 day

_gat

Google Analytics

0

BT_ctst

Acceptance of browser cookies

Session

isSdEnabled

Depth detection website

1 day

TS#

Improvement of the display/loading time

Session

IR Pages2_Session

Improvement of display/loading time

Session

cgi-bin/fncls.ssp

Counting requests for IR messages

Session

EquityStory

Session ID for equal distribution of requests via server

Session

cookie-layer_status

Consent to load Google Analytics

1 Year

cookie-layer_marketing

Consent to load Google Ads

1 Year

You have the option of accepting or rejecting cookies. The majority of web browsers automatically accept cookies. However, you can usually specify in the browser settings that cookies should be rejected. If cookies are rejected, you may no longer be able to use some functions of the website. If cookies are accepted, you can delete the accepted cookies at a later point in time. If you delete the cookies, all settings that are controlled by these cookies, including advertising settings, will be deleted and may no longer be restored. Further information on the cookie settings of common web browsers can be found under the following link:

HTTP://MEINE-COOKIES.ORG/COOKIES_VERWALTEN/INDEX.HTML.

2.5 Analysis

2.5.1 Use of Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”).

Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. IP anonymisation has been activated on this website so that the IP address of Google users within Member States of the European Union or in other contracting States of the Agreement on the European Economic Area is shortened beforehand. The full IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can find more information on how Google Analytics handles user data in the privacy policy of Google:

HTTPS://SUPPORT.GOOGLE.COM/ANALYTICS/ANSWER/6004245?HL=DE

You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out, however, that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing these data by clicking on the following link
(HTTP://TOOLS.GOOGLE.COM/DLPAGE/GAOPTOUT?HL=DE) and downloading and installing the available browser plug-in.

You can prevent Google Analytics from collecting data by clicking on the following link. An opt-out cookie is set which prevents the future collection of your data when you visit this website:

2.5.2 ReCaptcha

We use the Google reCaptcha service to determine whether a person or a computer makes a certain entry in our contact or newsletter form. Google uses the following information to check whether you are human or a computer: IP address of the end device used, the website that you visit on our site and on which the captcha is integrated, the date and duration of the visit, the identification data of the browser and operating system type used, Google account if you are logged in with Google, mouse movements on the reCaptcha areas as well as tasks in which you have to identify images. The legal basis for the data processing described is Article 6 para. 1 lit. f GDPR. There is a legitimate interest on our part in this data processing, to ensure the security of our website and to protect us from automated input (attacks).

2.6 Marketing

2.6.1 Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-related, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one device (e.g. mobile phone) can also be displayed on another of your devices (e.g. tablet or PC).

If you have given your consent, Google will link your web and App browser history to your Google account for this purpose. In this way, the same personalised advertising messages can be displayed on every device on which you log in with your Google account.

To support this function, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to our Google Analytics data in order to define and create target groups for cross-device advertising.

You can permanently object to cross-device remarketing/targeting by deactivating personalised advertising in your Google account; follow this link to do so:
 HTTPS://WWW.GOOGLE.COM/SETTINGS/ADS/ONWEB/.

The data collected are summarised in your Google account exclusively on the basis of your consent, which you can give to Google or revoke (Article 6 para. 1 lit. a GDPR). In the case of data collection processes that are not merged in your Google account (e.g. because you do not have a Google account or have objected to the merging), the collection of data is based on Article 6 para. 1 lit. f GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymised analysis of the visitors to the website for advertising purposes.

Further information and the privacy provisions can be found in the privacy policy of Google at: 
HTTPS://WWW.GOOGLE.COM/POLICIES/TECHNOLOGIES/ADS/.

2.6.2 Google AdWords und Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

We use so-called conversion tracking as part of Google AdWords. If you click on an ad placed by Google, a conversion tracking cookie is set. Cookies are small text files that the Internet browser stores on the computer of the user. These cookies lose their validity after 30 days and are not used to identify users personally. If the user visits certain pages on this website and the cookie has not yet expired, we and Google can see that the user clicked on the ad and was redirected to this page.

Every Google AdWords customer receives a different cookie. The cookies cannot be tracked by means of the websites of AdWords customers. The information obtained using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. If you do not want to participate in tracking, you can object to this use by easily disabling the Google conversion tracking cookie in your internet browser under user settings. You will then not be included in the conversion tracking statistics.

The storage of “conversion cookies” takes place on the basis of Article 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

You can find more information about Google AdWords and Google Conversion Tracking in the privacy policy of Google: 
HTTPS://WWW.GOOGLE.DE/POLICIES/PRIVACY/.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are disabled, the functionality of this website may be restricted.

2.7 External Media

Google Maps

This website uses the interactive Google Maps service to show geographical information (locations, buildings, properties, directions, etc).  Google Maps is a service of Google Ireland Limited. The content of  Google Maps is only shown with your explicit consent.

If you give your consent to display the content, you will be connected to the servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and your IP address and other information (e.g. user agent) will be provided.  This data is processed solely for the above-mentioned purpose and to maintain the security and functionality of Google Maps.

The processing of personal information in connection with Google Maps is based on your consent (Sec. 6 para. 1 sentence 1 lit. a GDPR) but may also be permissible on the basis of a legitimate interest (Sec. 6 para. 1 sentence 1 lit. f GDPR).

The storage period of processed data is defined by Google Ireland Limited and is generally 6 months. Further information can be found in the privacy policy for Google Maps: https://policies.google.com/privacy.

YouTube

This website uses the YouTube video service to display video content. YouTube Video is a service provided by  YouTube, LLC. Video content from YouTube, LLC. can be displayed on our website.

YouTube Video uses cookies and similar technologies to analyse user behaviour, recognise users and create user profiles. This information is used, for example, to analyse the number of clicks and to create reports. YouTube Video identifies users who are registered with YouTube, LLC, and assigns the videos played to their profile.

If you give your consent, you will be connected to YouTube, LLC c/o Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for the purpose of displaying content, whereby your IP address and other information (e.g. user agent) will also be transmitted. This data is processed solely for the above-mentioned purposes and to maintain the security and functionality of YouTube Video.

The processing of personal information in connection with YouTube is based on your consent (Sec. 6 para. 1 sentence 1 lit. a GDPR) but may also be permissible on the basis of a legitimate interest (Sec. 6 para. 1 sentence 1 lit. f GDPR).

The storage period of processed data is defined by Google Ireland Limited and is generally 6 months. Further information can be found in the privacy policy for YouTube: https://policies.google.com/privacy.

2.8 Use of specialised service providers for hosting and sending emails

We cooperate with specialised service providers for the provision of certain services, in particular for hosting the website and sending emails. These service providers process your personal data on our behalf and strictly in accordance with our instructions and guarantee compliance with data protection regulations and the necessary security measures. In addition, the service providers only receive such information from us that is required for the respective purpose of their service provision. 

2.9 Newsletter contact form on instone.de

If you contact us using the contact form to receive the newsletter, your details from the form, including the contact details you provided there, will be saved by us for the purpose of sending the newsletter. Without providing these data, we cannot send you a newsletter. We process the following personal data: Name, salutation and email address based on your consent (Article 6 para. 1 lit. a GDPR).

The data you enter in the form will remain with us until you ask us to delete them or revoke your consent. You can cancel the receipt of our newsletter at any time, i.e. revoke your consent, for example by means of the “Unsubscribe” link in the newsletter or via the email address datenschutzteaminstone "«@&.de.

2.10 Contact form interested parties for projects on instone.de

If you send us your expression of interest via the contact form, your details from the form, including the contact details you provided there, will be stored by us for the purpose of processing the request and in case of follow-up questions. Without providing these data, we cannot process your request. We process the following personal data on the basis of Article 6 para. 1 lit. b GDPR.

  • Address data
    • Salutation*
    • Title
    • First name*
    • Last name*
    • Email address*
    • Telephone number
    • Address
  • Interest
    • Type of housing
    • Number of rooms*
    • Living area*
    • Total budget/price range*
    • Financing requirement
    • Type of use
    • Housing style
    • Origin of the contact
    • Correspondence via free text field

The data marked with * are mandatory. We need these in order to be able to advise you. Without the basic information concerning your interests (living area, number of rooms, total budget), it is unfortunately not possible for us to advise you.

The data you enter in the form will generally remain with us until you ask us to delete them or the purpose for data storage no longer applies (e.g. after your request has been processed). If you purchase a property, we are legally obliged to keep your data for 10 years from the purchase contract.

2.11 Duration of storage

The data are generally deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified. 

The additional personal data collected during the sending process will be deleted after a period of time.

3 Social media

3.1 Data processing through social media

We maintain publicly accessible profiles on social media. The individual social media we use can be seen below. Social media such as Instagram, Twitter, Xing, LinkedIn and Google, etc. can generally analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media site triggers numerous privacy-related processing operations. 

If you are logged into your social media account and visit our social media site, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data can also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, these data are recorded, for example, using cookies that are stored on your device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media site. If you have an account on the respective social media, the interest-based advertising can be displayed on all devices on which you are or were logged in.

Please also note that we cannot retrace all processing processes on the social media portals. Depending on the provider, further processing operations can therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policies of the respective social media portals.
Our social media appearances are intended to ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Article 6 para. 1 lit. f GDPR. The analysis processes initiated by the social media may be based on different legal bases that must be specified by the operators of the social media (e.g. consent within the meaning of Article 6 para. 1 lit. a GDPR).

3.2 Data controller and the assertion of rights

If you visit one of our social media sites (e.g. Instagram), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can exercise your rights (information, correction, deletion, restriction of processing, data portability and complaint) against us as well as claim against the operator of the respective social media portal. Please note that, despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our possibilities are largely based on the company policy of the respective provider.

3.3 Storage period

The data collected directly by us via the social media site will be deleted from our systems as soon as the purpose for their storage no longer applies, you ask us to delete them, revoke your consent to storage or the purpose for data storage no longer applies. Saved cookies remain on your device until you delete them. Mandatory legal provisions, especially retention periods, remain unaffected. We have no influence on the storage period of your data which are stored by the operators of the social media for their own purposes. For details, please contact the operators of the social media directly (e.g. in their privacy policy, see below).

3.4 Social media in detail

3.4.1 Google profiles

We have profiles on Google. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland:
You can adjust your advertising settings yourself in your user account. To do so, click on the following link and log in: 
HTTPS://ADSSETTINGS.GOOGLE.COM/AUTHENTICATED 
Details can be found in the privacy policy of Google:

HTTPS://POLICIES.GOOGLE.COM/PRIVACY

3.4.2 Instagram

We have a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. Details on how they handle your personal data can be found in the privacy policy of Instagram: 
HTTPS://HELP.INSTAGRAM.COM/519522125107875

3.4.3 Twitter

We use the short message service Twitter. The provider is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Please note that we have no influence on data processing by Twitter, which may also take place outside the EEA. You can adjust your Twitter privacy settings yourself in your user account. To do so, click on the following link and log in:
HTTPS://TWITTER.COM/PERSONALIZATION

Details can be found in the privacy policy of Twitter:

HTTPS://TWITTER.COM/DE/PRIVACY

3.4.4 Twitter Pixel

Our website uses the visitor action pixel from Twitter, Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (“Twitter”) to measure conversion.

In this way, the behaviour of visitors to the site can be tracked after they have been redirected to the website of the provider by clicking on a Twitter advertisement. This allows the effectiveness of the Twitter advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimised.

The data collected are anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the user. However, the data are stored and processed by Twitter so that a connection to the respective user profile is possible and Twitter can use the data for its own advertising purposes in accordance with the Twitter privacy guideline. This enables Twitter to enable advertisements to be placed on Twitter as well as outside of Twitter. As the website operator, we cannot influence this use of the data.

You can disable the remarketing function under “Personalisation and data” in the privacy and security area
 HTTPS://TWITTER.COM/SETTINGS/PERSONALIZATION . To do so, you must be logged in to Twitter.

3.4.5 YouTube

We have a profile on YouTube. The operator of the website is YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. Details on how they handle your personal data can be found in the privacy policy of YouTube HTTPS://POLICIES.GOOGLE.COM/PRIVACY

You can find more information about privacy on YouTube in their privacy policy at: HTTPS://POLICIES.GOOGLE.COM/PRIVACY?HL=DE.

3.4.6 LinkedIn

Our website has a profile in the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time you visit one of our pages that contains LinkedIn functions, a connection to the LinkedIn servers is established. LinkedIn is informed that you have visited our website with your IP address. If you click the LinkedIn “Recommend” button and are logged into your LinkedIn account, LinkedIn is able to assign your visit to our website to you and your user account. We would like to point out that, as the provider of the website, we have no knowledge of the content of the data transmitted or how they are used by LinkedIn.

You can find more information on this in the privacy policy of LinkedIn at:

HTTPS://WWW.LINKEDIN.COM/LEGAL/PRIVACY-POLICY.

3.4.7 LinkedIn Pixel

Our website uses the visitor action pixel from LinkedIn, LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”) to measure conversion.

In this way, the behaviour of the visitors to the page can be tracked after they have been redirected to the website of the provider by clicking on a LinkedIn advertisement. This allows the effectiveness of the LinkedIn advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimised.

The data collected are anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the user. However, the data are stored and processed by LinkedIn so that a connection to the respective user profile is possible and LinkedIn can use the data for its own advertising purposes in accordance with the LinkedIn privacy guideline. This allows LinkedIn to enable advertisements to be placed on both LinkedIn and outside of LinkedIn. As the website operator, we cannot influence this use of the data.
You can disable the remarketing function in the account settings under  HTTPS://WWW.LINKEDIN.COM/PSETTINGS/ADVERTISING . To do so, you must be logged in to LinkedIn.

If you do not have a LinkedIn account, you can disable usage-based advertising from LinkedIn on the website of the European Interactive Digital Advertising Alliance:

HTTP://WWW.YOURONLINECHOICES.COM/DE/PRAFERENZMANAGEMENT/.

3.4.8 XING

We have a profile on Xing. The operator of the pages is the operator of the website New Work SE, Dammtorstrasse 30, 20354 Hamburg, Germany. Details on how they handle your personal data can be found in the privacy policy of Xing HTTPS://PRIVACY.XING.COM/DE .

You can find more information about privacy on Xing in their privacy policy at:

HTTPS://PRIVACY.XING.COM/DE/DATENSCHUTZERKLAERUNG

On the website of the European Interactive Digital Advertising Alliance HTTP://WWW.YOURONLINECHOICES.COM/DE/PRAFERENZMANAGEMENT/ you can object to all cookies stored on your computer, even if you do not have an account on the social media channels.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are disabled, the functionality of this website may be restricted.

4 Charity run

As part of the “Instone Move-to-help run”, we process the personal data of the participants. The processing of the personal participation data takes place within the framework of the charity award on the basis of Article 6 para. 1 lit. b GDPR. If the participant gives the appropriate consent, we will also process the personal participant data for the purpose of reporting on the charity run. In this case, the processing takes place on the basis of the consent pursuant to Article 6 para. 1 lit. a GDPR. The consent can be revoked at any time with effect for the future (see Section 1.4.6). The participant data will be deleted when they are no longer required or if the participant expressly requests it. We would like to point out that in the event of a request for deletion before the end of the fundraising campaign, the performance can no longer be taken into account when determining the donation.

Participants have the opportunity, on a purely voluntary basis, to send pictures of their sporting activities by email  bewegtinstone "«@&.de. By sending the corresponding images, the participants grant the organiser the right to publish the images on the website of the organiser and on social media for reporting purposes. The respective sender assures that he or she is entitled to grant the corresponding rights and that the rights of third parties are not violated. The data processing associated with the storage and publication of the image material takes place on the basis of the consent of the data subject (Article 6 para.1 lit. a GDPR) as well as on the basis of the legitimate interest of the organiser in reporting on the fundraising campaign (Article 6 para. 1 lit. f GDPR). 

Images that have not been published will be deleted within 14 days of the end of the fundraising campaign.