Data privacy

Privacy Policy of NR Immobilien INVEST GmbH

of NR Immobilien INVEST GmbH

1.    General information

In the following, we would like to provide you with an overview of how we process your personal data and of your rights under the data protection laws. Basic use of our website is possible without entering personal data. However, if you wish to use special services provided by our city through our website, your personal data may need to be processed. 

Personal data, for example your name, address or e-mail address, is always processed in line with the General Data Protection Regulation (GDPR) and in accordance with the coun-try-specific data protection regulations applicable to NR Immobilien Invest GmbH. By pub-lishing this Privacy Policy, we wish to inform you of the nature, scope, and purpose of the personal data we collect, use and process.

As the controller of processing, we have implemented numerous technical and organisa-tional measures aimed at ensuring the most complete protection of personal data pro-cessed through this website. Nevertheless, some security gaps may occur when transmit-ting data via the Internet, which means that absolute protection cannot be guaranteed. For this reason, you are free to submit personal data to us by alternative means, for ex-ample, by telephone or by post.

2.    The controller is

NR Immobilien INVEST GmbH
Brentanostraße 10, 12163 Berlin, Germany
Tel: +49 30 824 074 71
E-mail: mail@nr-immobilien-invest.de
Representative of the controller: Nico Reimann

3.    Data Protection Officer

We would like to point out that we are not required to appoint a data protection officer.
The contact person for matters related to data protection: Nico Reimann
Tel: +49 30 824 074 71
E-mail: mail@nr-immobilien-invest.de

4.    Legal basis for the processing

Article 6 (1) (a) of the GDPR serves as the legal basis for processing operations for which we obtain consent in respect of a specific purpose of processing.

If the processing of personal data is necessary for the performance of an agreement to which you are a party, as is the case, for example, when processing operations are neces-sary for the supply of goods or provision of any other service, the processing is based on Article 6 (1) (b) of the GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example, in the case of enquiries concerning our services.

If our company is subject to a legal obligation which requires personal data to be pro-cessed, for example, for the purposes of compliance with tax or commercial obligations, the processing is based on Article 6 (1) (c) of the GDPR.
And finally, processing operations may be based on Article 6 (1) (f) GDPR, where the pro-cessing is necessary to safeguard a legitimate interest of our company or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. 

5.    Transmission of data to third parties

Your personal data will only be transmitted to third parties for the purposes listed below.

We will only share your personal data with third parties if:

1. you have given your express consent to this in accordance with Article 6 (1) (a) of the GDPR,
2. the disclosure is permissible for the purpose of safeguarding our legitimate interests in accordance with Article 6 (1) (f) of the GDPR, and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
3. in the event that there is a statutory disclosure obligation in accordance with Article 6 (1) (c) of the GDPR, and
4. this is legally permissible and necessary for the processing of contractual relation-ships with you in accordance with Article 6 (1) (b) of the GDPR.
5. In order to protect your data and, where necessary, to enable us to transmit your data to third countries (outside the EU/EEA), we have concluded order processing agreements based on the standard contractual clauses of the European Commission.

6.    Technology

6.1 SSL/TLS encryption

This website uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact requests that you send to us (the operator). The connection is encrypted when the ad-dress line of the browser contains "https://" instead of "http://" and the padlock symbol is displayed next to the address line in your browser. We use this technology to protect the data you transmit.

6.2 Data collection when visiting our website

When you use our website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser trans-mits to our server (in so-called "server log files"). We collect a series of general data and information whenever you or an automated system access our website. This general data and information is stored in the server log files. 

The following data may be collected:

• browser types and versions used,
• the operating system used by the accessing system,
• the website from which an accessing system reaches our website (so-called refer-rers),
• the sub-websites which are accessed via an accessing system on our website,
• the date and time of access to the website,
• an Internet protocol address (IP address),
• the Internet service provider of the accessing system.

When using this general data and information, we do not draw any conclusions about you. Instead, this information is required to:

• deliver the content of our website correctly,
• optimise the content of our website as well as its advertisement,
• to ensure the permanent operability of our IT systems and the technology of our website, and
• provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack.

Therefore, we conduct a statistical analysis of the data and information we collect, with the aim of increasing the data protection and data security of our company, and in order to ensure an optimal level of protection of the personal data we process. The data of the server log files is stored separately from all personal data provided by a data subject.

The legal basis for the data processing is Article 6 (1) (f) of the GDPR. Our legitimate inter-est is established based on the data collection purposes listed above.

7.    Contact and form enquiries

General information

When you contact us (e.g. using the contact form or email), personal data will be collect-ed. When you use a contact form, you can see exactly what data is collected by looking at the fields of the form. This data is stored and used exclusively for the purpose of answer-ing your request and/or for establishing contact and the associated technical administra-tion. 

The legal basis for processing the data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) of the GDPR. If your contact is aimed at the conclusion of a contract or pre-contractual enquiries, the additional legal basis for the processing is Article 6 (1) (b) of the GDPR. Your data will be erased once the processing of your request has been completed, which is deemed to be the case if it can be inferred from the circum-stances that the matter concerned has been conclusively clarified, and provided that there are no legal storage obligations to the contrary.

Your search orders, property advertisements, etc. 

If you contact us due to your interest in a property and initiate a non-binding search or-der using a form, personal data provided by yourself and, if applicable, other data will be transmitted to us. We store this data and use it in order to process and answer your en-quiry or advertisement in the best possible way. 

We will initially request data such as your contact details, i.e. your title, first name / sur-name, e-mail address and telephone number, provided that you wish to be contacted by phone. Of course, you are under no obligation to transmit any data to us, though we can-not answer your enquiries and orders without certain information. In terms of content, you can provide information and parameters of your request yourself, such as the price range, type of property, location or region, surface area, special features of the property you are looking for or offering, such as attic, parking spaces, lift, fitted kitchen, etc.

Depending on your enquiry, other data categories may also be collected, the contents of which are derived from the fields of the enquiry form and the information you provide, where this is done in free text fields or additionally by email. 

We do not collect any data on the credit rating of our customers, unless we inform you about this separately. When data is exchanged via the form, technical data / server log files are stored as described above, as is the case with every web session. The transmis-sion is encrypted.

If the processing of the data is not necessary for the fulfilment of a contract or for the implementation of pre-contractual measures, the processing is based on our legitimate interest in the effective processing of the enquiries sent to us in accordance with Article 6 (1) (f) of GDPR or on your voluntary consent to processing in accordance with Article 6 (1) (a) of the GDPR.

8.    Right of access and erasure requests

If you contact us based on your right of access in order to obtain confirmation as to whether we are processing your personal data and, if applicable, request information in this respect, we will comply with this request due to our statutory obligation in accord-ance with Article 15 of the GDPR. If you request the erasure of your personal data stored by us in accordance with Article 17 of the GDPR, we will comply with this request, unless further processing is necessary to comply with a legal obligation to which we are subject, or for the establishment, exercise or defence of legal claims.

In order to be able to fulfil legitimate requests, we will need to check whether and what data we hold and whether the request is made by an authorised person. We can only provide information or erase data if the identity of the person submitting the request has been sufficiently established; If you do not provide us with sufficient evidence, we will be required to decline your request. To this end, we have to process your personal data that you transmit to us as part of your request. The legal basis for this is Article 6 (1) (c) of the GDPR, as this is necessary to fulfil a legal obligation to which we are subject. Your right of access requests are stored and the information you voluntarily transmit to us is used ex-clusively for the purpose of processing your request. The data required to process right of access requests or erasure requests, which we process due to our legal obligation, is usu-ally destroyed three years after the process has been completed. We have a legitimate interest within the meaning of Article 6 (1) (f) of the GDPR in being able to provide evi-dence to the supervisory authority that the requested information has been provided to the data subject, and in storing the data required for this purpose. This data is blocked for other processing, while access to it is restricted.

9.    Cookies

9.1 General information on cookies

We use cookies on our website. These are small files that your browser automatically cre-ates and that are stored on your IT system (laptop, tablet, smartphone, etc.) when you visit our website. The information stored in the cookie depends on the specific terminal device used. However, this does not mean that we are able to obtain any direct infor-mation about your identity. The use of cookies serves to make the use of our offer more user-friendly for you. We use so-called session cookies to recognise that you have previ-ously visited individual pages of our website. These are automatically deleted after you have left our website.

In addition, we also use temporary cookies to optimise the user-friendliness of our web-site, which are stored on your terminal device for a specified period of time. If you visit our website again to use our services, you will be automatically recognised as a returning visitor and the entries and settings you have made will be retrieved, so that you do not need to re-enter them.

At the same time, we also use cookies to record statistical data on the use of our website and to evaluate it, thus allowing us to optimise our offer for you. When you visit our website again, these cookies enable us to automatically recognise that you have previous-ly visited us. These cookies are automatically deleted after a defined period of time.

9.2 Legal basis for the use of cookies

The data processed by cookies, which is necessary for the proper functioning of the web-site, is required to safeguard our legitimate interests and those of third parties in accord-ance with Article 6 (1) (f) of the GDPR.
In respect of all other cookies, you shall be deemed to have given your consent to these within the meaning of Article 6 (1) (a) of the GDPR by using our opt-in cookie banner. You can view and change your consent settings here.

9.3 Consent via our Consent Management Platform (CMP) from Usercentrics

We use the Usercentrics Consent Management Platform (Usercentrics CMP) from Usercen-trics GmbH, Rosental 4, 80331 Munich, for the easy and transparent management of con-sent required under data protection law.
Usercentrics collects log file data and consent data using JavaScript. This JavaScript ena-bles us to inform the user about their consent to certain cookies and other technologies used on our website and to obtain, manage and document the user’s consent. We do this in order to comply with legal obligations and to store the consent for verification purpos-es. The legal basis for the processing of such data is Article 6 (1) (c) of the GDPR. The data is processed in the European Union. The consent data (consent and withdrawal of con-sent) is stored for three years. If the storage purpose for the specified processing purpos-es no longer applies or the relevant statutory storage period expires, the personal data will be routinely blocked or erased in accordance with the statutory provisions. The crite-rion of the storage period is the respective statutory retention period. You can perma-nently prevent the execution of JavaScript at any time by selecting the appropriate set-tings in your browser, which will also prevent Usercentrics from executing its JavaScript. 
Additional information on data protection at Usercentrics:
 https://usercentrics.com/de/datenschutzerklaerung/#toggle-id-7-closed. 
Contact for matters related to data protection: datenschutz@usercentrics.com.

Access to your consent settings
You have the option to change your decisions made via our Consent Management Plat-form at any time and to subsequently grant or withdraw your consent. Further infor-mation on data protection with regard to our cookies can be found under the Data Pro-tection Settings and you can check your setting options here: "CHANGE PRIVACY SETTINGS".

10.    Plug-ins and other services

10.1 Social media plug-ins

We do not use any integrated social media plug-ins on our website.

10.2 Flowfact

We have integrated services from Flowfact.de on our website. These are provided by the German FLOWFACT GmbH for the purpose of automating our own real estate services and making them available to you in a customer-friendly form. Insofar as personal data is ex-changed in the process, we have concluded the order processing contracts with Flowfact which are required in accordance with Article 28 of the GDPR. You can find Flowfact's data protection information at: www.flowfact.de/datenschutz. 

10.3 Google Web Fonts

For the uniform display of fonts, this website uses so-called web fonts, which are provid-ed by Google. When you call up a website, your browser loads the required web fonts into your browser cache to ensure that text and fonts are displayed correctly.

For this purpose, the browser you are using must establish a connection with the Google servers. When this happens, Google is informed that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Article 6 (1) (f) of the GDPR. If your browser does not support web fonts, instead, a standard font will be used by your computer.

Further information on Google Web Fonts: 

Google's Privacy Policy: https://www.google.com/policies/privacy/.

10.4 Font Awesome

This website uses the Font Awesome icon service from the American company Fonticons (307 S. Main St., Suite 202, Bentonville, AR 72712, USA). When you visit one of our web-sites, the Font Awesome web font is loaded via the Font Awesome Content Delivery Net-work (CDN). This enables us to integrate icons and fonts in a form that suits your respec-tive terminal device. 

Font Awesome is used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Article 6 (1) (f) of the GDPR. If your browser does not support web fonts, no icons / web fonts will be load-ed and instead, a standard font will be used by your computer.

Font Awesome Privacy Policy: 

Help page at: https://fontawesome.com/help.

11.    Web analytics

11.1 Google Analytics

On our website, we use the Google Analytics web analysis service from Google LLC. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; „Google“). If your habitual resi-dence is in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) shall act as the controller of your data. In this case, Google Ireland Limited, as a company affiliated with Google, is responsible for the processing of your data and compliance with the applicable data protection laws.

The processing of the data serves the purpose of analysing this website and its visitors, as well as marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website to evaluate your use of our website, to create reports on website activity for the operator of the website, and to provide other services related to website activity and Internet usage. Among other things, the following information may be collected: IP address, date and time of the website access, click path, information about the browser and device you are using, pages visited, referrer URL (web-site from which you access our website), location data, purchase activities. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. 

Google Analytics uses technologies such as cookies, web memory in the browser and tracking pixels, which enable the analysis of your use of the website. The information about your use of this website generated in this way is usually transferred to and stored by Google on servers in the United States. There is no adequacy decision by the EU Com-mission for the USA. The data is transmitted on the basis of standard contractual clauses, which are deemed to constitute suitable guarantees for the protection of personal data; These can be viewed at: policies.google.com/privacy/frameworks. 

Both Google and US government agencies have access to your data. Your data can be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and all other data about you stored by Google.

IP anonymisation is activated on this website. Your IP address is thus truncated by Google already within the Member States of the European Union or in other states which are party to the Agreement on the European Economic Area. Only in exceptional cases is the complete IP address transmitted to and truncated by Google on a server in the United States.

Cookies or comparable technologies are used with your consent on the basis of Section 15 (3) sentence 1 of the German Teleservices Act (TMG) in conjunction with Article 6 (1) (a) of the GDPR. Your personal data will be processed with your consent on the basis of Article 6 (1) (a) of the GDPR. You may withdraw your consent at any time, although this does not affect the legality of the processing carried out on the basis of your consent up to the time of the withdrawal of your consent. 

Further information on data protection in connection with Google Analytics can be found in Google Analytics Help at:

support.google.com/analytics/answer/6004245 ,

marketingplatform.google.com/about/analytics/terms/gb/ or

policies.google.com as well as

policies.google.com/technologies/cookies.

12.     Your rights as a data subject

12.1    Right to confirmation

You have the right to request confirmation from us as to whether personal data relating to you is being processed.

12.2    Right of access (Article 15 of the GDPR)

You have the right to obtain from us, at any time and free of charge, information about the personal data stored about you, as well as a copy of this data in accordance with the statutory provisions.

12.3    Right to rectification (Article 16 of the GDPR)

You have the right to request that inaccurate personal data concerning you be corrected. You also have the right to request that incomplete personal data be completed, taking into account the purposes of the processing.

12.4    Erasure (Article 17 of the GDPR)

You have the right to demand that we erase the personal data concerning you without undue delay in cases where one of the reasons provided for by law applies and insofar as the processing or storage is not required.

12.5    Restriction of processing (Article 18 of the GDPR)

You have the right to demand that we restrict processing where one of the legal require-ments is met.

12.6    Data portability (Article 20 of the GDPR)

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without any hindrance on our part, as long as the processing is based on consent pursuant to Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR, or on a contract pursuant to Article 6 (1) (b) of the GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exer-cise of official authority vested in us. 

Furthermore, in exercising your right to data portability pursuant to Article 20 (1) of the GDPR, you shall have the right to have personal data transmitted directly from one con-troller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others.

12.7    Objection (Article 21 of the GDPR)

You have the right to object, on grounds relating to your particular situation and at any time, to the processing of your personal data which is based on Article 6(1)(e) (data pro-cessing in the public interest) or (f) (data processing based on a balance of interests) of the GDPR.

This also applies to profiling based on these provisions within the meaning of Article 4 (4) of the GDPR.

If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

In individual cases, we process personal data for the purposes of direct advertising. You may object to the processing of personal data for such advertising at any time. This also applies to profiling, insofar as it is related to such direct advertising. If you object to our processing of your data for direct advertising purposes, we will no longer process your personal data for these purposes.

In addition, you shall have the right, on grounds relating to your particular situation, to object to our processing of personal data concerning you for scientific or historical re-search purposes, or for statistical purposes pursuant to Article 89 (1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

In addition, in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you are entitled to exercise your right to object by automated means using technical specifications.

12.8    Withdrawal of consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.

12.9    Lodging a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR. To do so, you can contact the supervisory authority - State Com-missioner for Data Protection - at your usual place of residence or work or at the regis-tered office of our company.

A compilation of the contact details of the data protection officers in the federal states and the supervisory authorities for the private sector, as well as in other countries, can be found on the website of the Federal Commissioner for Data Protection and Freedom of Information (BfDI) under “Anschriften und Links” (Addresses and Links).

13.    Storage, routine erasure and blocking of personal data

We process and store personal data according to the principles of data reduction and data economy, i.e. only for the period necessary to achieve the storage purpose (e.g. an-swering enquiries, executing contracts) or if this is provided for by legal provisions to which our company is subject. If the storage purpose no longer applies or the relevant statutory storage period expires, the personal data will be routinely blocked or erased in accordance with the statutory provisions. The criterion of the storage period is the re-spective statutory retention period.

14.    Further data protection questions

Should you have any further questions, comments or other queries regarding your per-sonal data, simply contact us using our contact details.