Data protection

Data Protection Policy

We know that careful handling of your personal data is very important to you. We therefore take protecting your personal data very seriously and comply with the applicable provisions of law when we collect, process or use personal data. This Data Protection Policy applies solely to our website at the URL www.isaria-muc.com; it does not apply to websites to which we only provide links.

Data controller

Isaria München Projektentwicklungs GmbH
Leopoldstraße 8
80802 München-Schwabing

Phone: +49 (089) 38 99 84-0
Fax: +49 089 38 99 84-760

E-mail: info@isaria-muc.com

Web: www.isaria-muc.com

Court of registry: Local Court of Munich [Amtsgericht München]

Register number: HRB München 246211

 

Data protection officer

Data Protection Officer of Isaria München Projektentwicklungs GmbH

Dr. Annette Demmel

SPB DPO Services GmbH

Unter den Linden 21

10117 Berlin

Phone: +49 172 69 11 332

E-mail: datenschutz@isaria-muc.com

Web: https://www.isaria-muc.com/  

Principles of data processing

Personal data are defined as any information that relates to an identified or identifiable natural person. This includes, for example, information such as your name, address, telephone number, e-mail address, IP address or user behavior. Information that we are unable (or able only at a disproportionate cost) to attribute to you, for example because the information has been anonymized, does not constitute personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transfer) must be conducted with a legal basis or with your consent. Processed personal data are erased as soon as the purpose for which they were processed is achieved and there are no further legally imposed retention duties to observe.

Insofar as we undertake personal data processing for the purpose of providing certain services, we provide information below concerning the specific processing operations, the scope and purpose of the data processing, the legal basis for the processing, and how long the processed data are stored for.

Individual processing operations

Provision and use of the website

Manner and scope of data processing

When you visit and use our website, we collect the personal data that your browser automatically transmits to our server. This information is temporarily stored in a “log file”. When you use our website we collect the following data, which are technically necessary to display our website and ensure stability and security:

- IP address of the retrieving computer

- Date and time of access

- Name and URL of the file that is retrieved

- Website from which our website was accessed (the referrer URL)

- The browser used and, in some cases, your computer’s operating system

- The name of your access provider

Legal basis

Point (f) of the first sentence of Art. 6(1) GDPR (EU General Data Protection Regulation) constitutes the legal basis for the data processing referred to. Processing the aforementioned data is necessary to provide the website and as such serves a legitimate interest of our company.

Storage period

These data are erased once they are no longer necessary to display the website. Collection of data for the purpose of providing the website and storage of the data in log files are absolutely necessary for operation of the website. Consequently, the user does not have the option of objecting to these processes. The data may be stored for a longer period of time if the law so requires.

Newsletter

Manner and scope of data processing

You can subscribe to a free newsletter on our website. We need the following information from you in order to send you the newsletter on a regular basis:

- E-mail address

For the purpose of sending you the newsletter, your data are disclosed to our newsletter service provider. No other disclosure of data is made. To distribute our newsletter we follow the “double opt-in” procedure, meaning we will send the newsletter to you only if you have previously confirmed your subscription by clicking on a link contained in a confirmation e-mail message sent to you for this purpose. We do this to ensure that only you, as the holder of the e-mail address submitted to us, are able to subscribe to the newsletter. You must confirm your subscription promptly upon receipt of the confirmation e-mail, otherwise your newsletter subscription will be automatically deleted from our database.

Legal basis

Processing of your e-mail address for the purpose of sending you the newsletter is based, in accordance with point (a) of the first sentence of Art. 6(1) GDPR, on the following declaration of consent as submitted voluntarily by you:

Declaration of consent:

By entering my data and confirming my entries with the “Sign Up” button, I consent to the processing of my e-mail address for regular receipt of the newsletter. I may discontinue the newsletter service at any time by clicking the appropriate link at the bottom of the newsletter. I have read and accepted the current Data Protection Policy. I may at any time revoke my consent to collection of the personal data entered during the sign-up process by contacting datenschutz@isaria-muc.com or info@isaria-muc.com.

You may at any time revoke your consent to the future use of your personal data by sending a message to the e-mail address provided in the Data Protection Policy or to our data protection officer.

Storage period

Your e-mail address will be stored for as long as you are subscribed to our newsletter. Your e-mail address will be deleted if you unsubscribe from the newsletter. The data may be stored for a longer period of time in a particular case if the law so requires.

Contact form

Manner and scope of data processing

We provide a form on our website via which you can contact us. The process of submitting your request through the contact form includes a reference to this Data Protection Policy for the purpose of obtaining your consent. The following personal data concerning you are processed through the contact form if you use it:

- First name

- Last name

- E-mail address

- Telephone number if needed

- Subject

- Content of the message

Disclosing your e-mail address serves the purpose of proper attribution of your request so that we are able to respond to it. No data are disclosed to third parties when you use the contact form.

Legal basis

Data are processed as previously described for the purpose of contacting you, in accordance with point (a) of the first sentence of Art. 6(1) GDPR, on the basis of the voluntarily issued declaration of consent that appears below.

Declaration of consent:

By entering my data and confirming my entries with the “Contact Us” button, I consent to the processing of my e-mail address, my first and last names, and my telephone number so that my contact request can be answered. I have read and accepted the current Data Protection Policy. I may revoke this consent at any time by writing to datenschutz@isaria-muc.com or info@isaria-muc.com.

You may at any time revoke your consent to the future use of your personal data by sending a message to the e-mail address provided in the Data Protection Policy or to our data protection officer.

Storage period

Once your request has been concluded and the issue in question is resolved and closed, the personal data concerning you that have been processed through the contact form will be deleted. The data may be stored for a longer period of time in a particular case if the law so requires.

Means of contacting us on our website

Our website provides various options for contacting us by e-mail.

Manner and scope of data processing

All visitors to the website may send their requests or concerns to these e-mail addresses. Requests sent to us by e-mail are dealt with by the appropriate departments. Our collection of data in this case is limited to the address of the e-mail account you use to contact us along with any personal data you may have provided when contacting us.

Legal basis

The lawfulness of the data collection is based on point (f) of the first sentence of Art. 6(1) GDPR as there is a coequal interest in establishing contact and communication between you and our company and a legitimate interest in processing the aforementioned data so that your request or concern can be dealt with.

Storage period

How long the data referred to above are stored for depends on the circumstances of your contacting us. Your data are regularly deleted if the purpose pursued by the communication no longer applies and storage of those data is no longer required (for example, after your request or concern has been dealt with).

Disclosure of data

We disclose your data to third parties only if:

- you have consented to such disclosure in accordance with point (a) of the first sentence of Art. 6(1) GDPR

- such disclosure is permitted by law and is, in accordance with point (b) of the first sentence of Art. 6(1) GDPR, required for performance of a contract with you

- a legal obligation exists to make such disclosure in accordance with point (c) of the first sentence of Art. 6(1) GDPR

- such disclosure is, in accordance with point (f) of the first sentence of Art. 6(1) GDPR, required for protection of legitimate company interests, or to assert, exercise or defend legal claims, and there is no reason to assume that you have an overriding protectable interest in non-disclosure of your data.

Use of cookies

Manner and scope of data processing

We use cookies on our website. Cookies are small files that we send to the browser on your device when you visit our website, and which are stored there. Some of the functions of our website cannot be provided without the use of technically necessary cookies. Other cookies provide us with various analytical capabilities. Cookies are able to recognize the browser you are using when you revisit our website, for example, and can send us various information. Among other things, cookies help us to design our internet content to be more user-friendly and effective for you by considering how you have used our website and by identifying your preferred settings (such as country and language settings). If third parties process information obtained through cookies, they collect the information directly through your browser. Cookies do not damage your device. They cannot execute programs, and they contain no viruses. On our website we use various kinds of cookies, the nature and function of which is explained in greater detail below.

Transient cookies

Transient cookies, which are automatically deleted as soon as you close your browser, are used on our website. This type of cookie is used to record your session ID. This makes it possible to attribute the various queries from your browser to one common session, enabling us to recognize your device on subsequent visits to our website.

Persistent cookies

Persistent cookies are used on our website. Persistent cookies are cookies that are stored in your browser over a long period of time and which send information to us. The storage period varies with the cookie. You can delete persistent cookies yourself by means of your browser settings.

Cookies for marketing and social media

Advertising cookies (third-party providers) make it possible to display various offers that match your interests. These cookies can be used to capture user activities on the web over a long period of time. The cookies may be able to recognize you on different devices that you use.

The following third-party providers receive personal data from cookies incorporated into our website: Google Analytics.

In addition, certain cookies make it possible to establish a connection to your social networks and to share the contents of our website within your networks.

Legal basis

With respect to the described purposes for which personal data are processed through the use of cookies, the legal basis for this processing is in point (f) of the first sentence of Art. 6(1) GDPR. If you have consented to the use of cookies on the basis of a notice placed on our website (“cookie banner”), the legitimacy of that use is additionally governed by point (a) of the first sentence of Art. 6(1) GDPR.

Storage period

As soon as the data transmitted to us by cookies are no longer necessary to achieve the purposes described above, the information is deleted. The data may be stored for a longer period of time if the law so requires.

Configuration of browser settings

Most browsers are preset to accept cookies by default, though you can configure your browser so that it accepts only specific cookies or no cookies at all. However, if you disable cookies from our website in your browser settings, you may no longer be able to make use of the full functionality of our website.
 You can also delete cookies stored in your browser via your browser settings. You can also change your setting so that your browser notifies you before cookies are stored. Because different browsers function in different ways, you should consult your browser help menu for information on the various configuration options of your browser. If you would like to have a comprehensive record of all third-party access to your web browser, we recommend that you install a plug-in that has been specially developed for that purpose.

Tracking and analysis tools

We use tracking and analysis tools to ensure that our website is continually optimized and that its design meets the needs of its visitors. With the aid of tracking tools we are also able to capture statistical user data concerning the use of our website by visitors and, using the knowledge gained by doing this, can continue to improve our online content for you. Use of the tracking and analysis tools described below is justified on the basis of these interests according to point (f) of the first sentence of Art. 6(1) GDPR. If you have consented to the use of cookies on the basis of a notice placed on our website (“cookie banner”), the legitimacy of that use is additionally governed by point (a) of the first sentence of Art. 6(1) GDPR. The description below of the tracking and analysis tools includes a description of the various purposes that data processing serves and of the data that are processed.

Google Analytics

Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (“Google”), is used on this website. Google Analytics uses cookies, which are text files that are stored on your computer and that make it possible to analyze your use of the website.

The information generated by these cookies concerning your use of our website is usually sent to a Google server in the USA and stored there. For our website we have activated IP address anonymization, whereby the IP addresses of Google users within the Member States of the European Union, or in other signatories to the Agreement on the European Economic Area, are truncated by Google in advance.

Google will use this information on our behalf to analyze your use of our website, to compile reports on the website activities, and to provide us, as a website operator, with other services associated with website and Internet use.

If your IP address is relayed by your browser as a result of the Google Analytics process, Google does not combine that information with other data.

You can prevent the cookies from being stored by means of the appropriate setting in your browser software. We must point out, however, that you may not be able to make use of the full functionality of our website if you do so.

In addition, you can prevent the data generated by the cookie and relating to your use of the website (including your IP address) from being collected and transferred to Google, and from being used by Google, by downloading and installing the browser plug-in that is available through the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser plug-in – and with particular relevance to mobile devices – you can also prevent Google Analytics from collecting data on this website in future on the device and browser you are currently using by clicking the following link; this will cause an opt-out cookie to be stored on your device: https://tools.google.com/dlpage/gaoptout?hl=de

Please note that, if you delete the cookies in that browser, the opt-out cookie will be deleted along with them, and you will have to click on the above link again if you wish to continue blocking the collection of your data. Information provided by Google on how Google collects, processes and uses your data can be found on Google’s website under “How Google uses information from sites or apps that use our services” (http://www.google.de/policies/privacy/partners/), under “Data privacy and security” (https://support.google.com/analytics/answer/6004245?hl=en) and in Google’s Terms of Service (https://www.google.com/analytics/terms/us.html). We assume no responsibility for the information provided by Google.

Google Maps

This website uses the Google Maps API to visually represent geographical information. When using Google Maps, Google also collects, processes and uses data relating to the use of the map function by visitors. You will find more detailed information on Google’s data processing in the Google Privacy Policy (http://www.google.com/policies/privacy/). There you can also change your personal data protection settings in the Data Protection Center.

Detailed instructions for managing your own data in connection with Google products can be found here: https://support.google.com/accounts#topic=3382296

YouTube

User information is processed when you access or watch videos embedded in our website that are provided from the YouTube platform.

The provider of the YouTube platform is YouTube LLC (901 Cherry Ave., San Bruno, CA 94066, USA), which is a subsidiary of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Use of content offered on YouTube requires a connection to YouTube’s servers in the USA. When videos are retrieved and watched, data that can be attributed to you are transferred to YouTube. In addition, YouTube uses cookies to store data that can be attributed to you. If you are logged into YouTube as a member, YouTube is able to attribute those data to your personal user account. You can prevent this attribution by logging off YouTube before retrieving the video. Further information about YouTube and how YouTube collects, processes and uses your data can be found at the following Internet address: https://www.google.de/intl/de/policies/privacy/. We assume no responsibility for this information.

Social networks

To make our website more appealing and user-friendly, some areas of this website have links to selected social platforms (including Facebook, Google+, Twitter and LinkedIn), in the form of “social bookmarks”. Social bookmarks are Internet bookmarks by which users of such a service can collect links and news reports. We do not, however, use any social plug-ins such as the “Like” button on Facebook. We protect your privacy by not incorporating social networks into our website and by providing links only. Data are transferred to a social network only when you click on one of the links. For information about how your personal data are handled when you use those websites, please read the data privacy policies of their providers.

Hyperlinks

Our website contains so-called “hyperlinks” to the websites of other providers. Activating these hyperlinks takes you directly from our website to the website of the other provider. You can tell when this happens by the change of URL, among other things. We can assume no responsibility for the confidentiality of your data on such third-party websites since we are unable to control whether those companies comply with data protection policy. For information on how your personal data are handled by those companies, please consult their websites directly.

Rights of data subjects

As the data subject whose personal data are processed, you have the following rights under the GDPR:

Right of access, Art. 15 GDPR: If your personal data are being processed, then you have the right to information concerning the data pertaining to your person that have been stored.

Right to rectification, Art. 16 GDPR: Should personal information be processed that is inaccurate, you have the right to have that information corrected.

Right to erasure, right to limit processing, Art. 17 and 18 GDPR: Subject to certain legal conditions, you have the right to have your data erased and to limit the processing of your data.

Right to data portability, Art. 20 GDPR: If you have consented to data processing or there exists a contract for data processing and the data processing is performed with the aid of automated processes, then you have a right to data portability.

Right to object, Art. 21 GDPR: You have the right to object at any time to the processing of your personal data.

Right to lodge a complaint with a supervisory authority, Art. 77 GDPR: You have the right to lodge a complaint with an additional supervisory authority (Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach oder Postfach 1349, 91504 Ansbach; phone: +49 (0)981 180093-0; fax: +49 (0)981 180093-800; https://www.lda.bayern.de/de/beschwerde.html).

Right to revocation, Art. 7(3) GDPR: If the processing of your personal data is based on point (a) of the first sentence of Art. 6(1) GDPR or point (a) of Art. 9(2) GDPR, then you have the right to revoke your consent at any time. Your revocation will not affect the lawfulness of the processing that occurred on the basis of your consent before that consent was revoked.

Right to object, Art. 21 GDPR

You have the right to object at any time, for reasons relating to your particular situation, to processing of your personal data that is undertaken on the basis of point (e) of the first sentence of Art. 6(1) GDPR (data processing in the public interest) or point (f) of the first sentence of Art. 6(1) GDPR (data processing on the basis of a balancing of interests). If you raise an objection, we will no longer process your personal data unless we can show compelling protectable grounds for the processing that outweigh your interests, rights and freedoms or the processing serves the purpose of asserting, exercising or defending legal claims.

If we process your personal data for direct marketing purposes, then you have the right to object at any time to the processing of your personal data for the purpose of that sort of advertising to the extent that the processing is undertaken in connection with such direct marketing. If you object to data processing for direct marketing purposes, then we will no longer process your personal data for these purposes.

You can make your objection informally and free of charge, stating your name and your address. If you would like to assert a right to object on grounds relating to your particular situation, then please also briefly present the relevant reasons.

The objection should be directed to:

Data protection officer of Isaria München Projektentwicklungs GmbH

Dr. Annette Demmel

SPB DPO Services GmbH

Unter den Linden 21

10117 Berlin

Phone: +49 172 69 11 332

E-mail: datenschutz@isaria-muc.com

Internet: https://www.isaria-muc.com

Data security and security measures

We are committed to protecting your privacy and treating your personal data confidentially. To prevent your personal data from being manipulated, lost or misused while in our safekeeping, we take extensive technical and organizational security precautions that are regularly reviewed and adapted to advances in technology. These include, among other aspects, use of recognized encryption methods (SSL or TLS). We must point out, however, that the structure of the internet means that the rules of data protection and the aforementioned security measures may not be observed by other persons or institutions that exist outside our sphere of responsibility. In particular, third parties may be able to read data that are disclosed in unencrypted form, e.g. when they are contained in an unencrypted e-mail message. We have no technical control over this sort of activity. It is the user’s responsibility to protect the data they provide against misuse, by means of encryption or other means.

Amendments to the Data Protection Policy

We reserve the right to update this Policy as needed to keep it aligned in content with the website. We will update this Policy to the same extent if there are changes in the law that make doing so necessary.

Should you have further questions on the topic of data protection that our Data Protection Policy has not been able to answer, please contact our data protection officer. We will get in touch with you as quickly as possible.

(Last updated: July 1, 2020)