Privacy policy

THE FLAG Frankfurt III GmbH

  1. Data protection information

This Data Protection Policy contains information on the extent to which we process your personal data (hereinafter referred to as “data”).

  1. Controller

The controller in accordance with the General Data Protection Regulation (GDPR) is:

THE FLAG Frankfurt III GmbH
Listertalstraße 73
57439 Attendorn

Web: www.the-flag.de
E-mail: datenschutz@the-flag.de

 

  1. Data protection officer contact details

E-mail: datenschutz@the-flag.de

  1. Data processing

We process data to operate our website. This also includes disclosure in the form of transfer to third parties and, if necessary, to so-called third countries outside the European Union (EU) and the European Economic Area.

An adequacy decision, the so-called “EU-US Privacy Shield”, has been issued by the EU Commission for data transfers to the USA. With this decision, the EU Commission confirms that the guarantees given for data transfers to the USA are based on the provisions of the EU-US Privacy Shield and meet the EU data protection standard. We have marked the participation of our service providers in the EU-US Privacy Shield whenever we transfer data to the USA.

The individual data affected, processing purposes, legal bases, recipients and transfer to third countries are stated below:

a) Log files when visiting websites

We log your website visit. We process the name of the accessed web page, date and time of access, transferred data volume, browser type and version, your operating system, referrer URL (previously visited web page), your IP address and querying provider. This is necessary to ensure that the website is secure. We process the data on the basis of our legitimate interests in accordance with Art. 6 (1) lit. f GDPR, to guarantee the security of the website. Log files are deleted after seven days, unless they are required for clarifying or proving specific violations of the law that have been uncovered within the retention period.

b) Hosting

All data related to the operation of this website is stored as part of the hosting process. The data is processed on the basis of our legitimate interests in accordance with Art. 6 (1) lit. f GDPR, to make it possible to operate the website. We use the services of web hosting providers to operate our website to whom we transfer the above-stated data (Section 4 b).

c) Contacting us

If you contact us, we process your name, any contact details you provide and your message for the sole purpose of processing and handling your query. The data is processed on the basis of Art. 6 (1) lit. b GDPR for the fulfilment of the agreement and/or our pre-contractual obligations or on the basis of our legitimate interests in accordance with Art. 6 (1) lit. f GDPR for the purpose of processing your query.

d) Contacting us for job applications

If you contact us to send us your job application, e.g. per e-mail or through a contact form, your data (e.g. name, e-mail address, requested place of work, if stated by you), your message and the submitted job application documents are processed for the sole purpose of processing and handling your job application. The predominant legal basis for these data processing activities is Section 26 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). It states that data may be processed which is required in connection with making a decision about concluding an employment contract with an applicant.

Should the data be required once the application process has closed, i.e. for prosecution purposes, the data may be processed to maintain our legitimate interests in accordance with Art. 6 (1) lit. f GDPR, namely for the assertion and/or defence of claims.

e) Inclusion in our pool of applicants

By your request, we can include your application profile in our pool of applicants so that we can consider and invite you to apply for suitable vacancies. The data is processed on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.

f) User account

By opening a customer account you agree to the storage of your existing data (name, address, e-mail address and bank details) and user data (user name and password). This enables us to identify you as a customer and provides you with the opportunity of managing your orders and mandates. The data is processed on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.

g) Processing of residential letting agreements

In order to perform the existing residential letting agreements, we process your data from the respective letting agreement. The data is processed on the basis of Art. 6 (1) lit. b GDPR for the purpose of contractual fulfilment.

h) Tenant´s disclosure of confidential information for residential letting agreements

In order to assess your reliability and credit rating as a future tenant, we, the landlord, require that you disclose corresponding confidential information. We process the following data in this respect, if provided by you: name, address, proof of income.

The data is processed on the basis of our legitimate interests in accordance with Art. 6 (1) lit. f GDPR to ensure that the potential letting agreement can be properly performed and processed properly. We also have the option to determine if the residential property on offer would meet your requirements as a tenant.

i) Waiting list registration

As a potential tenant, you have the opportunity to have your tenant profile included on our waiting lists. We shall notify you immediately through the contact details provided by you of any suitable vacant properties. The data is processed on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.

j) Video surveillance in our properties

We occasionally use video surveillance in our properties. The monitored areas are marked with the following pictogram and information:

We use video surveillance to protect against burglaries and vandalism. The legal basis for this is our legitimate interest in accordance with Art. 6 (1) lit. f GDPR regarding the protection of property against vandalism. All persons present in the marked area are recorded. All recordings are automatically deleted after 30 days.

  1. Cookies, website analysis and marketing

We use cookies to enable certain functions. These are small data packages that are stored on your device and exchanged with other providers. Some of the cookies used by us are deleted once you close your browser (session cookies). Other cookies remain on your device and make it possible to recognise your browser when you next visit (persistent cookies). Data processing activities due to cookies that serve the sole purpose of creating the functionality of our website are therefore performed on the basis of our legitimate interests in accordance with Art. 6 (1) lit. f GDPR.

You can delete all cookies stored on your device and adjust the settings of the popular browsers to prevent the installation of cookies. If you choose to do this, you may have to readjust the settings at every visit to this website. Some of the functions may also not be available to you.

We use additional services in connection with the following functionalities:

Google services

We use various services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter referred to as “Google”) on our website. Google may transfer data to the USA during this process. For such transfers Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, which processes the data in this case, has agreed to comply with the EU-US Privacy Shield:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

For further information on data protection please go to: https://policies.google.com/privacy?hl=de&gl=de

Google Analytics

We use the Google Analytics tracking tool on our website. It records and systematically analyses the interactions of website visitors primarily with the help of cookies. The following data is stored when you visit the website:

  • 3 bytes of the IP address of the accessed system of the website visitor (anonymised IP address)
  • Accessed website
  • Website from which the user accessed the page on our website (referrer)
  • Sub-pages that are accessed form the website
  • Duration of the website visit
  • Frequency of the website access

This data is transferred and stored on a Google server located in the USA. We use Google Analytics with the “anonymizeIp()” extension. This abbreviates the IP addresses prior to transferring them to the server in the USA (e.g. 192.158.79.***). This usually makes it impossible to create a direct link to a person. In particular, it is no longer possible to allocate the accessed computer or device of the website visitor. The unabbreviated IP address is only transferred to a server in the USA and abbreviated there in exceptional circumstances.

We use Google Analytics for analysing your use of the website, compiling website activity reports for the website operators, providing additional services related to the website use and improving the website’s user friendliness.

The data is processed on the basis of our prevailing interest in the optimal marketing of our website in accordance with Art. 6 (1) lit. f GDPR. Google never links your IP address to other Google data.

You can object to the processing of your data at any time and with future effect by using the deactivation add-on for browsers by Google Analytics which can be downloaded at https://tools.google.com/dlpage/gaoptout?hl=de.

Please read the additional information on the use of data by Google in the Google partner network at: https://www.google.com/intl/de/policies/privacy/partners/

  1. Embedded external content

We use dynamic third-party content for optimising the display and offers of our website. When you visit our website, an application programming interface (API) automatically sends a query to the server of the respective content provider during which certain log data (i.e. IP address of the user) is transferred. The dynamic content is then transferred to, and displayed on, our website.

a) Google Maps

We use Google Maps by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on our website to provide you with an interactive map. When displaying the map, data, including your IP address and location, is transferred to and stored on Google servers located in the USA. This data is processed on the basis of our prevailing interest in the optimal marketing of our website in accordance with Art. 6 (1) lit. f GDPR.

For exceptional circumstances in which Google transfers data to the USA, Google- LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA has agreed to comply with the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

For further information on data protection please go to: https://policies.google.com/privacy?hl=de&gl=de  

b) Google Fonts

We use external fonts by Google Fonts to create a more appealing website look. When you visit our website, these fonts are loaded from the servers of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

Google does not store any cookies in your browser to do so. According to the information provided to us, however, the IP address of the user’s device is transferred to, and stored by, Google. This data is processed on the basis of our prevailing interest in the optimal marketing of our website in accordance with Art. 6 (1) lit. f GDPR.

Google is certified at:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

For further information on data protection please go to: https://policies.google.com/privacy?hl=de&gl=de

  1. Data retention period

We store your personal data only as long as it is required for the purposes for which it is processed or until you withdraw your previous consent for us to do so. The retention period for certain data may be up to 10 years in the event of us having to comply with statutory retention periods, regardless of the processing purposes.

  1. Your rights as the data subject

a) Information

You can request free-of-charge information on all of your personal data that we have stored at any time.

b) Correction, deletion and restriction of processing (block), objection

Should you no longer agree to the storage of your personal data, or should your data have become incorrect, we shall initiate its deletion or block upon your corresponding request or make the respective corrections (if this is possible in accordance with the applicable laws). The same applies if you wish for us to restrict the processing of your data in the future. You have the right to object, in particular, if your data is required for the performance of a task that is in the interest of the public or in our legitimate interest as well as any profiling based thereon. You also have the same right to object to data processing for the purpose of direct advertising.

c) Data transferability

By your request, we shall provide you with your data in a standard, structured and machine-readable format so that you can transfer it to another controller.

d) Right to revoke your consent with future effect

You can revoke any consent you may have given with future effect. Your revocation shall not affect the legitimacy of the processing up to the date of revocation.

e) Right to complain

You may, at any time, complain to a supervisory authority with regard to your rights as the data subject:

(https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html).

f) Restrictions

The above rights do not apply to data that we cannot use for identifying the data subject, such as data that has been anonymised for analysis purposes. Information, deletion, blocking, correction and transfer to another company with regard to this data may be possible if you provide us with additional information that enables us to identify the data subject.

  1. Assertion of your rights as the data subject

Should you have questions regarding the processing of your personal data as well as information on, the correction, blocking and deletion of, and objection to data, or wish to transfer the data to another company, please contact datenschutz@the-flag.de.

 

Our site uses cookies, mainly from external plugins. If you use our website, you agree to the use of cookies. Please read our privacy policy.
Unsere Seite benutzt Cookies, hauptsächlich von externen Plugins. Wenn Sie unsere Webseite nutzen, stimmen Sie der Verwendung von Cookies zu. Bitte lesen Sie dazu unsere Datenschutzerklärung.