Bayerische Hausbau GmbH & Co. KG
Zugspitzstraße 7
82049 Pullach im Isar Valley
Germany
Tel.: +49 89 358300-0
Email: info@hausbau.de
Website: www.hausbau.de
is the controller within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws.
The controller’s Data Protection Officer is:
AGOR AG
Niddastraße 74
60329 Frankfurt am Main
Germany
Tel.: +49 (0) 69 – 9494 32 410
Email: info@agor-ag.com
Website: www.agor-ag.com
As a rule, we collect and use our website users’ personal data only to the extent necessary to provide a functional website and our content and services.
As a rule, we collect and use our users’ personal data only with their consent. An exception to this principle applies in cases where processing of the data is permitted by law or where obtaining prior consent is not possible for practical reasons.
The legal bases for the processing of personal data generally arise from:
Art. 6(1) sentence 1 lit. a GDPR when obtaining the data subject’s consent.
Art. 6(1) sentence 1 lit. b GDPR for processing necessary for the performance of a contract to which the data subject is a party. This also includes processing operations required to carry out pre-contractual measures.
Art. 6(1) sentence 1 lit. c GDPR for processing necessary to comply with a legal obligation.
Art. 6(1) sentence 1 lit. d GDPR if vital interests of the data subject or another natural person require the processing of personal data.
Art. 6(1) sentence 1 lit. f GDPR if processing is necessary to safeguard a legitimate interest of our company or a third party and the data subject’s interests, fundamental rights and freedoms do not override the former interest. In order to base the processing of personal data on a legitimate interest, an assessment is carried out for each relevant process in coordination with the Data Protection Officer, whereby the following three requirements must be met:
1) The controller responsible for processing the personal data or a third party has a legitimate interest in the data processing.
2) The processing is necessary to safeguard the legitimate interest.
3) The data subject’s interests or fundamental rights and freedoms requiring the protection of personal data do not override it.
Users’ personal data will be deleted or blocked as soon as the purpose for storing it no longer applies. Storage beyond this may take place if provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted when a storage period prescribed by the aforementioned provisions expires, unless further storage of the data is necessary for the conclusion or performance of a contract.
Each time our website is accessed, our system automatically collects data and information from the user’s computer system. The following information may be collected:
Information about the browser type and version used, the user’s operating system, the user’s internet service provider, the user’s IP address, date and time of access, websites from which the user’s system accesses our website, websites accessed by the user’s system via our website
The data described is stored in our system’s log files. This data is not stored together with other personal data of the user.
The temporary storage of the IP address by our system is necessary to deliver the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
Storage in log files takes place to ensure the functionality of the website. In addition, the data helps us optimise the website and ensure the security of our IT systems. The data is not evaluated for marketing purposes in this context.
The legal basis for the temporary storage of the data and the log files is Art. 6(1) sentence 1 lit. f GDPR.
The collection of your personal data to provide our website and the storage of the data in log files is strictly necessary for operating the website. Therefore, there is no right to object for the user.
Your data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. If your data is collected to ensure the provision of the website, it will be deleted when the respective session ends.
If your data is stored in log files, it will be deleted after no later than seven days. Storage beyond this is possible; in this case, users’ IP addresses are deleted or anonymised. This means the calling client can no longer be assigned.
We use cookies on our website. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. When you access a website, a cookie may be stored on your operating system. It contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.
We use cookies to make our website more user-friendly. Some elements of our website require that the browser can be identified even after a page change.
The legal basis for storing cookies, device identifiers and similar tracking technologies, or for storing information on the end user’s terminal equipment and accessing this information, is the European ePrivacy Directive in conjunction with the Telecommunications Digital Services Data Protection Act (TDDDG).
Please note that the legal bases for processing the personal data collected in this context then arise from the GDPR (Art. 6(1) sentence 1 GDPR). The legal basis applicable in each specific case for processing personal data can be found further below for the respective cookie or the respective processing itself.
The primary legal basis for storing information on the end user’s terminal equipment—i.e. in particular for storing cookies—is your consent, Section 25(1) sentence 1 TDDDG. Consent is given when you visit our website—although it does not have to be given—and can be withdrawn at any time in the cookie settings.
Pursuant to Section 25(2) no. 2 TDDDG, consent is not required if storing information on the end user’s terminal equipment or accessing information already stored on the end user’s terminal equipment is strictly necessary for the provider of a telemedia service to provide a telemedia service expressly requested by the user. You can see from the cookie settings which cookies are classified as strictly necessary (often also referred to as “technically necessary cookies”), therefore fall under the exception in Section 25(2) TDDDG and thus do not require consent.
When cookies are used, the following data is stored and transmitted:
Log-in information
The legal basis for processing personal data using cookies arises from Art. 6(1) sentence 1 lit. f GDPR. The purpose of using technically necessary cookies is to simplify the use of our website.
We would like to point out that certain functions of our website can only be offered with the use of cookies.
These include the following applications:
Elementor
We use the plugin “Elementor Website Builder for WordPress” from the provider
Elementor 8 THE GRN STE A DOVER, DE 19901 USA. This plugin processes
no personal data.
You can find out more about Elementor’s data protection provisions here:
https://elementor.com/about/privacy/
We do not use user data collected through technically necessary cookies to create user profiles.
Cookies are stored on the user’s computer and transmitted by the user to our site. As a user, you therefore have control over the use of cookies. You can restrict or disable the transmission of cookies by changing the settings in your internet browser. Stored cookies can also be deleted there. Please note that if you disable cookies, you may no longer be able to use all functions of our website.
The legal basis for processing personal data using cookies for analysis and advertising purposes is, where the user has given consent, Art. 6(1) sentence 1 lit. a GDPR.
This website uses the provider Borlabs (Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg), which sets a technically necessary cookie (borlabs-cookie) to enable you to make individual cookie settings and to document them in compliance with data protection law. When our website is accessed, the following data is transmitted to Borlabs: your consent or withdrawal of consent to the setting of cookies, a cookie set in your browser by the Borlabs cookie, the cookie duration and version, domain and path of the website, and the UID. The UID is a randomly generated ID and not personal information. Borlabs does not process any personal data.
The Borlabs cookie consent technology is used to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6(1) sentence 1 lit. c GDPR.
Your consents given when entering the website are stored in the borlabs-cookie cookie. If you wish to withdraw these consents, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent.
You have the right to obtain from us, as the controller, information as to whether and which personal data concerning you is processed by us, as well as further information in accordance with the statutory requirements under Art. 13 and 14 GDPR.
You may assert your right of access at:
If the personal data concerning you that we process is incorrect or incomplete, you have the right to rectification and/or completion. Rectification will be carried out without undue delay.
You have the right to restriction of processing of personal data concerning you in accordance with the statutory provisions (Art. 18 GDPR).
If the grounds set out in Art. 17 GDPR apply, you may request that personal data concerning you be erased without undue delay.
We would like to point out that the right to erasure does not apply insofar as processing is necessary for one of the exceptions listed in Art. 17(3).
If you have asserted the right to rectification, erasure or restriction of processing, we are obliged to inform all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You also have the right to be informed about these recipients.
Under the GDPR, you also have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller.
You have the right to withdraw your data protection consent declaration at any time. We would like to point out that withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent up to the time of withdrawal.
You also have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6(1) sentence 1 lit. e or f GDPR.
Under the EU General Data Protection Regulation, you also have the right not to be subject to a decision based solely on automated processing—including profiling—which produces legal effects concerning you or similarly significantly affects you.
If you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.
The GDPR ensures an equally high level of data protection within the European Union. When selecting our service providers, we therefore rely on European partners wherever possible if your personal data is to be processed. Only in exceptional cases will we have data processed outside the European Union when using third-party services. We only permit processing of your data in a third country if the special requirements of Art. 44 et seq. GDPR are met. This means that your data may then only be processed on the basis of special safeguards, such as an adequacy decision officially recognised by the EU Commission confirming a level of data protection equivalent to that of the EU, or compliance with officially recognised specific contractual obligations, the so-called “Standard Data Protection Clauses”.
Within the framework of the so-called “Data Privacy Framework” (DPF), the EU Commission has also recognised the level of data protection as adequate for certain companies from the USA under the adequacy decision of 10 July 2023. You can find the list of certified companies as well as further information on the DPF on the website of the US Department of Commerce at https://www.dataprivacyframework.gov/s/participant-search (in English).
General
You can subscribe to a free newsletter on our website, with which we inform you about our current offers of interest. The advertised goods and services are named in the consent declaration. The data you enter in the input form during registration will be transmitted to us.
On the basis of the consent obtained from you during the registration process, we collect the following data:
First name, last name, email, telephone
In addition, the following data is stored at the time of transmission:
IP address of the accessing computer, date and time of registration.
Your data will not be passed on to third parties in connection with data processing for sending newsletters. The data is used exclusively for sending the newsletter.
Double opt-in and logging
Registration for our newsletter takes place using a so-called double opt-in procedure. After registering, you will receive an email asking you to confirm your registration. This confirmation is necessary to ensure that no one can register using someone else’s email address.
Newsletter registrations are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation, as well as the IP address.
Legal basis
The legal basis for processing the data is, where the user has given consent, Art. 6(1) sentence 1 lit. a GDPR. The collection of the user’s email address serves to deliver the newsletter.
Deletion, withdrawal and objection
Your data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Your email address will therefore be stored for as long as the newsletter subscription is active. You can end the newsletter subscription at any time by withdrawing your consent. For this purpose, each newsletter contains a corresponding link.
We also inform you that you may object at any time to the future processing of your personal data in accordance with the statutory provisions pursuant to Art. 21 GDPR. The objection may in particular be made against processing for direct marketing purposes.
Brevo
Newsletters are sent via “Brevo”, a newsletter dispatch platform provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin.
The email addresses of our newsletter recipients, as well as their other data described in these notices, are stored on Brevo’s servers. Brevo uses this information to send and evaluate the newsletters on our behalf. In addition, according to its own information, Brevo may use this data to optimise or improve its own services, e.g. to technically optimise the dispatch and presentation of the newsletters or for economic purposes, to determine which countries the recipients come from. However, Brevo does not use the data of our newsletter recipients to contact them itself or pass it on to third parties.
We rely on Brevo’s reliability and IT and data security. We have also concluded a data processing agreement with Brevo. This is a contract in which Brevo undertakes to protect our users’ data, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties. You can view Brevo’s data protection provisions here: https://www.brevo.com/de/legal/privacypolicy/.
Statistical collection
We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the evaluations, we link your data and the web beacons with your email address and an individual ID.
If you do not want your newsletter usage to be analysed, you must unsubscribe from the newsletter. We provide a corresponding link in every newsletter message for this purpose. You can also unsubscribe from the newsletter directly on the website. The information is stored for as long as you have subscribed to the newsletter.
If you would like to contact us, a contact form is available on our website, which you can use for electronic contact. The data entered in the input form is transmitted to us and stored. This data is:
Salutation, name, email address, telephone, type of use (of the property), budget, desired apartment size, additional message field
At the time the message is sent, the following data is also stored:
Date and time of contact
You also have the option of contacting us via the email address or telephone number provided. In this case, the user’s personal data transmitted with the email or by telephone will be stored.
Your data will not be passed on to third parties in this context; the data is used exclusively for processing the contact.
The legal basis for processing the contact request and handling it is generally Art. 6(1) sentence 1 lit. b GDPR.
If additional personal data is processed during the sending process, this serves only to prevent misuse of the contact form and to ensure the security of our IT systems.
Your data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the contact form input fields and those sent by email or telephone, this is the case when the respective conversation with the user has ended. The conversation is deemed ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The tool itself (which implements the tags) does not use cookies and, for technical reasons, only collects your IP address. The tool triggers other tags, which in turn may set cookies and collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager.
If we have obtained your consent, the legal basis for using Google Tag Manager is Art. 6(1) sentence 1 lit. a GDPR. Otherwise, the legal basis for using the technically necessary cookie arises from our legitimate interest pursuant to Art. 6(1) sentence 1 lit. f GDPR.
Further information can be found in the provider’s terms of use at: https://www.google.com/intl/de/tagmanager/use-policy.html
This website uses the Rank Math SEO plugin to improve search engine optimisation (SEO). Rank Math SEO uses cookies and stores technical data to monitor and optimise the website’s SEO performance. Data such as page views, clicks and other interactions may also be collected in order to achieve better placement in search results. This data is used exclusively for optimisation purposes and is not passed on to third parties.
This data is processed on the basis of your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.
Further information about the data collected by Rank Math and its processing can be found in Rank Math’s privacy policy: https://rankmath.com/de/privacy-policy/
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Using Google Analytics 4 provides us with a wide range of options. We operate Google Analytics 4 using the following technologies:
This stores and retrieves information on your computer that enables us to analyse your use of the website. The information generated about your use of this website is generally transmitted to a Google server in the USA and stored there. Your IP address is anonymised by default before transmission to us and Google. Although the full IP address is transmitted to a Google server in the USA, it is immediately shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The legal basis for using Google Analytics is your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.
During your visit to the website, your user behaviour is recorded in the form of “events”. Events may include:
In addition, the following may be recorded:
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website use and internet use to the website operator.
We use the User-ID function. With the help of the User ID, we can assign a unique, persistent ID to one or more sessions (and the activities within those sessions) and analyse user behaviour across devices.
We use Google Signals. This allows Google Analytics to collect additional information about users who have enabled personalised ads (interests and demographic data, such as your gender or interests), and ads can be delivered to these users in cross-device remarketing campaigns.
To better understand user behaviour, Google Analytics 4 uses machine learning. These algorithms help to close data gaps that may arise, for example, due to tracking errors.
They also serve as the basis for predictive metrics, which use past data to predict future user behaviour as accurately as possible. These predictions can be used, for example, to forecast the likelihood of user churn or purchases, or revenue.
Recipients of the data may include:
We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offering and make it more interesting for you as a user. The legal basis for using Google Analytics is your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.
We store your data for a period of 12 months.
Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Terms of use: https://marketingplatform.google.com/about/analytics/terms/de/, Privacy overview: https://policies.google.com/?hl=de, and the privacy policy: http://www.google.de/intl/de/policies/privacy.