Data Protection Statement

1. Controller’s name and contact data (Article 4(7) GDPR)

G&P Cirrus GmbH & Co. KG
Management: Groß Immobilienverwaltungs GmbH
Siesmayerstrasse 21
60323 Frankfurt/Main

Tel.: +49 (69)36 00 95-100
e-mail: info@gross-partner.de

Hereinafter referred to as “we” or “us”.

2. Collection and processing of personal data when accessing the website

You can use our website without letting us know who you are. However, our web servers automatically store technical information when you do so. This information includes the type of web browser, the operating system used, your IP address, your Internet service provider, the website from which you come to ours, other websites you visit and the date and duration of your visit. The processing of these data, in particular your IP address and the other data listed, is necessary to deliver the website at all. Your IP address has to be stored for the duration of your session. We do not combine these data with other data from different sources. The legal basis for this data processing to enable the use of the website is Article 6(1) sentence 1(f) GDPR, whereby our legitimate interest is providing our website.

Aside from this, we store and analyze these data only for statistical purposes and only in anonymized form, and we use them in this anonymized form only to analyze the use of our website and its ongoing refinement and optimization, also on the basis of Article 6(1) sentence 1(f) GDPR. Our legitimate interest is the ongoing improvement of our website so as to offer you the utmost user comfort.

3. Other data

Other personal data are stored if you send them to us voluntarily, in particular if you contact us using the contact data provided on the website.

Naturally, these personal data are stored and used only as far as the law allows and to fulfill the purpose intended when you send us your data, e.g. answering your inquiry. The basis for this storage and use of these personal data is Article 6(1) sentence 1(b) GDPR, to the extent that you enter these personal data for the purpose of entering into a contract. Otherwise, we store and use these data on the basis of Article 6(1) sentence 1(f) GDPR, whereby our legitimate interest is the processing of your concern.

4. Are personal data shared with third parties?

Your personal data are typically shared with third parties only with your express consent in accordance with Article 6(1) sentence 1(a) GDPR. The only exceptions to this are data sent to our service providers or cooperative partners that we require to provide our services or our website offers and that we have engaged accordingly (e.g. technical service providers, payment service providers). In line with the above, your data are sent to such service providers or cooperative partners for the purposes of contract fulfillment in accordance with Article 6(1) sentence 1(b) GDPR. In these cases, both we and our partners strictly comply with GDPR requirements. Before forwarding your personal data, we naturally ensure that service providers and cooperative partners have implemented all necessary technical and organizational procedures to guarantee an appropriate level of protection. The scope of the data transmission is limited to the necessary minimum.

Your data will not be sold, let or otherwise provided to third parties.

Personal data are sent to public authorities or agencies authorized to receive such information only in conjunction with statutory duties to provide information or if we are required to provide information on the basis of a court decision. In such cases, the disclosure of your data is necessary in accordance with Article 6(1) sentence 1(c) GDPR to fulfill a legal obligation.

5. Automated individual decision-making

We do not engage in automated individual decision-making, including profiling, in accordance with Article 22(1) and (4) GDPR.

6. No obligation to provide personal data

You are under no legal or contractual obligation to provide us with your personal data. However, it is possible that we will only be able to perform some of our services to a limited extent, or not at all, if the necessary data are not provided. For example, you cannot use our website without sending certain technical data (including your IP address).

7. Security

We use suitable technical and organizational security procedures in accordance with Article 32 GDPR to guarantee an appropriate level of protection for the data of yours that we process, and in particular to protect these data against accidental or intentional manipulation, loss or destruction, and against access by unauthorized persons. Our security measures are continuously improved to keep pace with advancements in technology. We store information relevant to data protection exclusively on protected systems in Germany. Access is limited to just a few authorized persons and those subject to data secrecy entrusted with the technical, administrative or editorial handling of data.

8. General storage period and erasure

We store your personal data for as long as necessary to fulfill the intended purpose (e.g. contract fulfillment, answering your inquiry) or for as long as legitimate interests as referred to by Article 17(3) GDPR, such as statutory retention periods, necessitate storage. For as long as statutory retention requirements, such as the provisions of tax or commercial law, prevent the erasure of your personal data, we restrict the processing of your data; your data are then erased in accordance with the statutory provisions.

9. Your rights

Where the statutory conditions apply and to the extent provided for by law, you have the following rights as a data subject. You have the right:

• to receive information on the processing of your personal data (Article 15 GDPR);

• to obtain without undue delay the rectification of inaccurate personal data concerning you and the completion of incomplete personal data (Article 16 GDPR);

• to obtain the erasure of personal data concerning you without undue delay (Article 17 GDPR);

• to request the restriction of processing of personal data concerning you (Article 18 GDPR);

• to receive your personal data that you have provided to us in a structured and machine-readable format or to request transmission of these data to another controller (Article 20 GDPR);

• to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you if the processing is based on a legitimate interest; if your data are used for direct marketing, you have the right to object at any time (Article 21 GDPR);

• to withdraw your consent to data processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal (Article 7(3) GDPR);

• to lodge a complaint about the processing of your data with a supervisory authority (Article 77 GDPR).

To exercise your rights as listed above, please contact us at the address provided or send an e-mail to info@gross-partner.de.

10. Scope of this data protection statement

This data protection statement naturally only applies to our website and to data processing on the servers we use. It does not cover such content and third-party websites that our website merely links to. This applies, for example, to social networks such as Facebook or Twitter. The processing of your personal data by these social networks is performed by the respective operator of the network and is beyond our control. This also applies to your personal data that you share on such a platform, for example by writing to our profile on the respective social network. Information on the handling of your personal data and its protection on these platforms can be found in the data protection statement of the respective platform.

However, if we store your personal data that you have provided to us via a social network, or that we have received from a social network, on our own servers and use them to process your inquiry or your concern or for other purposes, our declarations in this data protection statement naturally apply in this regard.

11. Amendment of this data protection statement

We reserve the right to review and revise this data protection statement from time to time if this is appropriate, for example due to new technical developments or changes in case law or our business operations. We therefore recommend that you read the regulations of this data protection statement from time to time to ensure that you know how we collect, process and use your personal data.