DATA PROTECTION - MD Immobilien Projekte

1. Data protection, responsible person, and data protection officer

In the following, we will inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, such as name, address, e-mail addresses, telephone number, user behavior, etc.

Responsible for the processing of your personal data through this website is

MD-Immobilien-Projektierungsgesellschaft SL

Owner: Martina Dauber

Ses Sitjes 1, 07630 Campos, Spain

Phone: +34 971 160 429

E-Mail: info@md-immoprojekte.com

You can reach our data protection officer at the e-mail address info@md-immoprojekte.com or our postal address with the addition “Attn: Data Protection Officer”.

Among other things, tools and plugins from companies based in the USA are integrated on our website. If these are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on this processing.

2. Note on data transfer to the USA

3. Personal data

(a) In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Article 6 (1) p. 1 lit. f GDPR):

IP address
Date and time of the request
Time zone difference from Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transferred in each case
Website from which the request comes
Browser
Operating system and its interface
Language and version of the browser software

Log file information is stored for security reasons (e.g. to clarify acts of abuse or fraud) for a maximum of 7 days and then be deleted. Data, whose further storage is required for evidentiary purposes, is exempt from deletion until final clarification of the respective incident. The legal basis is Article 6 (1), lit. f GDPR.

(b) In addition, personal data is only collected by us if and to the extent that you voluntarily provide us with this data, e.g. in the context of contacting us or applying. We treat this data confidentially and use it only for the original reason and purpose of the transmission, regularly the processing and handling of your request. As a matter of principle, the data will not be transferred to third parties unless this is required or permitted by law or if you have given us your consent or there is an official order to do so. If your inquiry is directed to one of our group companies, we will of course forward your inquiry to that company. If you contact us by e-mail, your e-mail will be stored in our mail system. We may store your inquiry and related data in our CRM system. The e-mails themselves are not stored with encrypted content. Our contact form is transport-encrypted via SSL/TLS, which you can recognize by the “https” in front of the URL. Our mail server also masters the common transport encryption protocols. The legal basis for this is Article 6 (1) lit. b GDPR.

4. Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, dwell time, operating systems used and the origin of the user. This data may be summarized by Google in a profile that is assigned to the respective user or their end device. Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.

The use of this analysis tool is based on Article 6 (1) lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is carried out exclusively on the basis of Article 6 (1) lit a GDPR; the consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymization

We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

Browser Plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout.

For more information on how Google Analytics handles user data, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245.

Order processing

We have concluded an order processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics

This website uses the “demographic characteristics” function of Google Analytics to display suitable advertisements to website visitors within the Google advertising network. This allows reports to be generated that contain statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item “Objection to data collection”.

5. Hosting with Domain Factory

We host our website at Domain Factory. When you visit our website, your personal data is processed on Domain Factory’s servers. The data transfer is based on the EU standard contractual clauses.

6. Social Media

The legal basis for this processing of your personal data is our legitimate interest in communicating with our prospects and customers, as well as the analysis and further development of services and products, and the improvement of business processes (Article 6(1)(f) GDPR). Direct customer contact also takes place via our social media support, whereby the processing is based on our contractual relationship or the pre-contractual measures with interested parties (Article 6(1)(b) GDPR).

More information on social media platforms:

Facebook and Instagram: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

We are jointly responsible with Facebook for the processing of Insights data on the Facebook fan page. The corresponding agreement pursuant to Article 26 GDPR can be found here:
https://www.facebook.com/legal/terms/page_controller_addendum. You can find more information about Page Insights at
https://www.facebook.com/legal/terms/information_about_page_insights_data.

The general use of Facebook is your own responsibility. You can find Facebook’s privacy policy directly on our Facebook fan page.

You can edit and object to their wishes for personalized advertising by Facebook at any time in their settings on Facebook.

Twitter: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

For information on the data collected by Twitter, purposes and all other data protection information, please refer to the Twitter privacy policy (https://twitter.com/privacy).

You can find an opt-out option at: https://twitter.com/personalization

YouTube: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

For more information on data protection and the personal data collected by Google/YouTube during integration, please see the following privacy policy: https://www.google.com/policies/privacy/

Opt-out is also possible: https://adssettings.google.com/authenticated

LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland.
We also maintain a company profile on the LinkedIn networking platform.

If you are a member there, LinkedIn can assign the call of the contents and functions on our profile to your user profile there. For more information, please refer to the data protection information of LinkedIn Ireland at:
https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

Xing: New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.

We also maintain a company profile on the Xing networking platform.

If you are a member there, Xing can assign the call of the content and functions on our profile to your user profile there. For further information, please refer to the data protection information of New Work SE at:
https://privacy.xing.com/datenschutzerklaerung.

7. Video content

Youtube and Vimeo

We embed videos on our website. The content of these videos is stored directly on the platforms and embedded on our site. If you call up such a video, the IP address, technical information such as browser, operating system, and basic device information as well as the website you have visited are communicated. In addition, we have embedded the YouTube videos in a data protection-friendly manner in “extended data protection mode”.

Personal data is only transferred when you call up a video. Only then will a server connection to YouTube and Vimeo be established, and a corresponding cookie set, which serves to save your settings. By accessing the videos, you leave our area and enter the external platforms of YouTube and Vimeo, which are beyond our control.

Before you access a video, you will be informed about it again. If you have an account with the provider of the video service, it may be able to identify you. You can avoid this by logging out of your account before playing a video.

The legal basis for the activation of these videos is your consent pursuant to Article 6 (1) lit. . a GDPR, which is related to your consent to a cookie use.

YouTube platform provider
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Further information on data protection at Google/YouTube can be found here: https://www.google.com/policies/privacy/. A general advertising opt-out is possible here:
https://adssettings.google.com/authenticated.

Vimeo platform provider
Vimeo, LLC, 555 West 18th Street, New York, NY 10011, USA. You can find more information about Vimeo’s privacy policy here: https://livestream.com/legal/cookie-preferences.

8. Your Rights

(1) Right to information: You have the right to information in accordance with Article 15 GDPR at any time as to whether we are processing personal data about you. If this is the case, this results in further information obligations on our part.

(2) Right to rectification: Furthermore, you have a right to rectification of the data in accordance with Article 16 of the GDPR, to deletion of the data in accordance with Article 17 of the GDPR and to restriction of the processing of the data in accordance with Article 18 of the GDPR, if this does not conflict with any other legal requirements.

(3) Right to deletion: of course, you can revoke your consent to the processing of data at any time without giving reasons in accordance with Article 6(1) (a) or Article 9(2)(a) GDPR. This does not affect the lawfulness of the processing until the revocation.

(4) Right to restriction of processing: In the following cases, you may contact us regarding a restriction of processing pursuant to Article 18 of the GDPR:

You have disputed the accuracy of data and we should not continue to use it in the meantime, pending final verification.
The processing is unlawful, but you do not want erasure, but prefer restriction of processing
We no longer need the data and would delete it, but you still need it to assert, exercise or defend legal claims
You have filed an objection to the data processing, but it is still under review.

In the event of a restriction, we ensure that the personal data cannot be further processed or changed by us. . If the restriction of processing has been restricted in accordance with the above-mentioned conditions, you will be informed by the person responsible before the restriction is lifted.

(5) Right to data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format and, if necessary, to transfer it to third parties. The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, pursuant to Article 20 GDPR.

(6) Right of objection: In addition, in particular when processing on the basis of Article 6 Paragraph 1 lit. e or f GDPR, the right to object to the processing of the data under Article 21 GDPR. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust the data processing or point out to you our compelling reasons worthy of protection, on the basis of which we will continue the processing.

As of December 2021