Data protection

 

Thank you for your interest in our website. The protection of your privacy when processing personal data and the security of all business data is an important concern for us, which we take into account in our business processes. Here we inform you in detail about how we handle your data.

 

§ 1 General information on the collection of personal data in connection with visits to our website

(1) In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour. We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is

FOM Invest GmbH
Friedrich-Ebert-Anlage 22
69117 Heidelberg 

Phone: +49 6221 36366-0
E-mail: kontakt@fom-invest.de

You can contact our data protection officer at datenschutz@fomrealestate.de or at our postal address with the addition "The Data Protection Officer".

(3) This website is hosted by an external service provider (hosting service). The personal data collected on this website is stored on the hosting service's servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website. The hosting service is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time. Our hosting service will only process your data to the extent that this is necessary to fulfil its service obligations and follow our instructions with regard to this data.

We use the following hosting service:

Hetzner Online GmbH
Industriestraße 25
91710 Gunzenhausen
Deutschland

We have concluded a data processing agreement (DPA) with the website host. This is a contract prescribed by data protection law, which ensures that the host processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

(4) Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion will take place after these reasons no longer apply.

(5) If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, insofar as special categories of data are processed in accordance with Art. 9 para. 1 GDPR. In the event of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or access to information on your end device (e.g. via device fingerprinting), the data processing is also carried out on the basis of Section 25 (1) TTDSG. Consent can be revoked at any time. If your data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data if this is necessary to fulfil a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. Data processing may also be carried out on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Information on the relevant legal bases in each individual case is provided in the following paragraphs of this privacy policy.

§ 2 Your rights

(1) ) In the following, we will inform you about your rights as a data subject in accordance with Art. 15 GDPR. You can exercise these rights at any time by contacting us directly. If you assert these rights against us, we will examine them in detail, taking into account the associated legal requirements and conditions. We may request further information from you for this purpose. We will explain the results of our review and our approach to fulfilling your request in detail. It is possible that we will not be able to fully fulfil your wishes in the manner you have requested. This should not prevent you from asserting your rights against us or enquiring with us in this regard. We will be happy to answer any questions you may have.

(2) Right to information
You have the right to request information from us at any time as to whether and which of your personal data is processed by us. This also includes information on the purposes of the processing, any recipients to whom we have disclosed your data, the planned storage period and, if applicable, information on the origin of this data if we have not collected it directly from you. In addition, you have the right to a one-off copy of your personal data stored by us free of charge. We reserve the right to charge a reasonable administrative fee for the creation of the following copies.

(3) Right to rectification
You have the right to request that we correct any inaccurate personal data that we have stored about you. This also includes the right to have incomplete personal data completed.

(4) Right to cancellation
You have the right to request that we erase data that we have stored about you. If we have published data about you, this also includes our obligation to forward all links to this data and copies or replications of this data to other controllers responsible for processing this published personal data as part of the "right to be forgotten" in accordance with Art. 17 para. 2 GDPR, taking into account available technology and implementation costs.

(5) Right to restriction of processing
You have the right to request that we restrict the processing of data that we have stored about you. This data can then only be processed with your consent or for a few legally defined purposes. 

(6) Right to object to the processing
Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

(7) ) Right to withdraw consent under data protection law
If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.

(8) Right to data portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format for the purpose of transmitting it to another controller. At your request and taking into account the available technical possibilities, this also includes the direct transfer from us to the other controller.

(9) Right to lodge a complaint with a supervisory authority
You have the right to complain to a data protection supervisory authority about our processing of your personal data at any time.

§ 3 Collection of personal data when visiting our website

(1) Even when using our website for purely informational purposes, we collect at least the personal data listed below, which your browser transmits to our server each time you access a page. This is necessary for technical reasons in order to display our website to you and to ensure its stability and security (the legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR):

  • IP adress
  • Hostname
  • Date and time of the enquiry 
  • Time zone difference to Greenwich Mean Time (GMT) 
  • Content of the request (specific page) 
  • Access status/HTTP status code
  • Amount of data transferred in each case 
  • Website from which the request comes (referrer)
  • The specific pages of our website that you have accessed 
  • Browser: Type, version and set language
  • Operating system: type and version
  • JavaScript is also activated:
  • Screen resolution
  • Colour depth
  • Size of the browser window
  • Installed browser plugins

(2) Use of cookies and other storage technologies:

Cookies are small text files that are stored on your end device and assigned to the browser you are using. Furthermore, websites can store so-called HTML5 storage objects on your end device. In both cases, information is stored and read out again. This can be done for very different purposes, but no programmes can be executed or malware transmitted as a result.

a) We have deliberately decided not to use tracking technologies on our website that require consent or to place elements on your end device that require consent. For this reason, you can also visit our website completely undisturbed without having to click away a so-called "cookie banner" beforehand or having to give your consent or refusal to certain trackers and cookies. Nevertheless - or precisely because of this - you can be sure that we take your privacy seriously when you visit our website and respect data protection.

b) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We generally recommend that you delete cookies, the browser history and other temporary web storage objects automatically or manually on a regular basis in order to increase the protection of your privacy.

§ 4 Further functions and offers of our website

(1) When you contact us by e-mail, your e-mail address and other data you provide will be stored by us in order to answer your enquiry. If a business relationship exists between you and us or is established as a result of your enquiry, we will store this data for the duration of our business relationship. Otherwise, we will delete this data after storage is no longer necessary for the complete processing of your enquiry. If statutory retention obligations prevent deletion, we will restrict the processing of the data for the duration of this period and then delete it. By sending your e-mail, you declare your consent that we may process the data transmitted by you in the aforementioned manner (legal basis: Art. 6 para. 1 sentence 1 lit. a GDPR).

(3) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us and we have concluded agreements with them to protect your data to the extent required by data protection law. If they are based outside the European Economic Area (EEA), we have ensured that they are located in countries for which the EU Commission has determined a comparable level of data protection or we have ensured a comparable level of data protection for this data processing by means of corresponding contractual agreements.

Stand: 05.10.2023